diff --git a/services/web/config/settings.defaults.coffee b/services/web/config/settings.defaults.coffee
index ae2e8698cc..afa3e907b1 100644
--- a/services/web/config/settings.defaults.coffee
+++ b/services/web/config/settings.defaults.coffee
@@ -239,8 +239,8 @@ module.exports = settings =
 	httpAuthUsers: httpAuthUsers
 
 	twoFactorAuthentication:
-		enabled: false
-		requiredForStaff: false
+		enabled: process.env['TWO_FACTOR_AUTHENTICATION_ENABLED'] == 'true'
+		requiredForStaff: process.env['TWO_FACTOR_AUTHENTICATION_REQUIRED_FOR_STAFF'] == 'true'
 
 	# Default features
 	# ----------------