diff --git a/services/web/config/settings.defaults.coffee b/services/web/config/settings.defaults.coffee
index 17b705c776..b938db434f 100644
--- a/services/web/config/settings.defaults.coffee
+++ b/services/web/config/settings.defaults.coffee
@@ -225,8 +225,8 @@ module.exports = settings =
 	httpAuthUsers: httpAuthUsers
 
 	twoFactorAuthentication:
-		enabled: false
-		requiredForStaff: false
+		enabled: process.env['TWO_FACTOR_AUTHENTICATION_ENABLED'] == 'true'
+		requiredForStaff: process.env['TWO_FACTOR_AUTHENTICATION_REQUIRED_FOR_STAFF'] == 'true'
 
 	# Default features
 	# ----------------