As designed There is no 2-step authentication for install/upgrade page.

[fadstart]

Affected version

2.1

Hi. I have enabled 2-step authentication for my admin account, however there is missing 2-step auth for install/upgrade page (mysite.com/install/index.php?upgrade/) and is asking only for a password instead. There is a "do a fresh install" and "Rebuild master data" option on that page, not sounds good for me.

 

[Mike]

This is very much intentional, as 2FA could block the ability to complete an upgrade and leave a site in an unusable state.

The master data rebuild generally doesn't do anything (unless something has gone wrong already). Reinstalling requires manually removing a file from the file system and does not depend on a user account (it can't) -- that's just a link in case that's what you're after (clicking it will tell you the file needs to be deleted).

 

[fadstart]

Ok, thanks for the clarification