JA EN
shiichan

Cloudflare is now nudging you to set up 2FA the moment you log in!

Cloudflare Changelog ★★ View Markdown
#cloudflare#security

Hey everyone, it's me! Today I found a small but genuinely nice update around Cloudflare's login screen, so let's dig in.

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to the Cloudflare Changelog, on January 23, 2026 Cloudflare Fundamentals (the account platform features) got a new 2FA experience. Users who haven't set up 2FA now see a prompt to enroll in email 2FA right at login. The stated goal is to raise users' overall security posture while keeping friction to a minimum. Enrolling stays optional, and you can skip it, but it's strongly encouraged as the best way to prevent account takeovers.

Cloudflare also reworked the existing 2FA screens. Instead of one similar-looking flow regardless of factor type, each factor now gets its own experience that reflects how that specific method actually works.

The story so far

Cloudflare already offered several 2FA options, including email, TOTP apps, and hardware keys, but setting one up was mostly left to the user, and login never actively nudged you toward it. Plenty of people knew 2FA existed but kept putting it off, and some probably never even found the settings page.

What changes

  • Logging in without 2FA now triggers an on-the-spot prompt to enroll in email 2FA
  • Enrolling stays optional; it isn't forced
  • The existing 2FA settings screens were reorganized into a layout tailored to each factor type

For anyone who kept meaning to set up 2FA "later," every login is now a fresh reminder. The benefit is especially real for accounts with admin privileges on a team, where the damage from a takeover would be much bigger.

Dive Deep

The source material mostly covers the new login interstitial screen (with a screenshot) and a link to the email 2FA setup guide; it doesn't go into rollout scope or detailed specs. It also doesn't describe how the screens for other factor types, like TOTP apps or hardware keys, changed in this particular update. Setup itself still happens from the 2FA settings page inside your Cloudflare dashboard's User Profile.

Wrap-up

  • Logging in without 2FA now surfaces a prompt to enroll in email 2FA
  • Enrolling remains optional and isn't forced
  • The existing 2FA settings screens were redesigned with a layout tailored to each factor type
  • The goal is to raise baseline account security while keeping the added friction to a minimum

If you use the Cloudflare dashboard regularly, especially as a team admin, this is a small change worth paying attention to.

Related posts