Home Assistant’s contributor guidance warns that custom integrations which supply their own authentication provider must update their login flow for Core 2026.11. Without the change, those providers stop requesting a second factor, even when they previously relied on Home Assistant to add that step.

Josef Zweck explains how to use the new MFA-aware login flow and finish authentication through its checking method. This warning applies to custom authentication providers, which Home Assistant does not support; it is not an instruction for ordinary household accounts to disable or reconfigure their two-factor settings.