diff --git a/Pipfile b/Pipfile
index 794af014d..1e79bb604 100644
--- a/Pipfile
+++ b/Pipfile
@@ -8,7 +8,7 @@ dateparser = "~=1.2"
 # WARNING: django does not use semver.
 #          Only patch versions are guaranteed to not introduce breaking changes.
 django = "~=5.1.3"
-django-allauth = {extras = ["socialaccount"], version = "*"}
+django-allauth = {extras = ["mfa", "socialaccount"], version = "*"}
 django-auditlog = "*"
 django-celery-results = "*"
 django-compression-middleware = "*"
diff --git a/Pipfile.lock b/Pipfile.lock
index 9377e3575..063ec2389 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "dccf58aea1ba4c0aa4aa93c1cc13881229889db25bc6e5b2384413a7e7e85182"
+            "sha256": "5a7cb70103e8f3931682c73432290f2f4ec2ba06395c8ec076d2d5449c4ff0dd"
         },
         "pipfile-spec": 6,
         "requires": {},
@@ -522,6 +522,7 @@
         },
         "django-allauth": {
             "extras": [
+                "mfa",
                 "socialaccount"
             ],
             "hashes": [
@@ -641,6 +642,13 @@
             "markers": "python_version >= '3.7'",
             "version": "==1.2.2"
         },
+        "fido2": {
+            "hashes": [
+                "sha256:26100f226d12ced621ca6198528ce17edf67b78df4287aee1285fee3cd5aa9fc",
+                "sha256:6be34c0b9fe85e4911fd2d103cce7ae8ce2f064384a7a2a3bd970b3ef7702931"
+            ],
+            "version": "==1.1.3"
+        },
         "filelock": {
             "hashes": [
                 "sha256:2082e5703d51fbf98ea75855d9d5527e33d8ff23099bec374a134febee6946b0",
@@ -1776,6 +1784,13 @@
             "index": "pypi",
             "version": "==0.1.9"
         },
+        "qrcode": {
+            "hashes": [
+                "sha256:025ce2b150f7fe4296d116ee9bad455a6643ab4f6e7dce541613a4758cbce347",
+                "sha256:9fc05f03305ad27a709eb742cf3097fa19e6f6f93bb9e2f039c0979190f6f1b1"
+            ],
+            "version": "==8.0"
+        },
         "rapidfuzz": {
             "hashes": [
                 "sha256:00d02cbd75d283c287471b5b3738b3e05c9096150f93f2d2dfa10b3d700f2db9",
diff --git a/src/paperless/settings.py b/src/paperless/settings.py
index d6489fa81..5f54ad915 100644
--- a/src/paperless/settings.py
+++ b/src/paperless/settings.py
@@ -316,6 +316,7 @@ INSTALLED_APPS = [
     "allauth",
     "allauth.account",
     "allauth.socialaccount",
+    "allauth.mfa",
     *env_apps,
 ]