<?xml version="1.0"?>
<group name="auth" position="after">
                <field name="totp_enabled" invisible="1"/>
                <div>
                    <div class="o_horizontal_separator mt-2 mb-4 text-uppercase fw-bolder small">Two-factor Authentication
                        <button attrs="{'invisible': [('totp_enabled', '!=', False)]}" name="action_totp_enable_wizard" type="object" class="fa fa-toggle-off o_auth_2fa_btn" aria-label="Enable 2FA"/>
                        <button attrs="{'invisible': [('totp_enabled', '=', False)]}" name="action_totp_disable" type="object" class="fa fa-toggle-on o_auth_2fa_btn text-primary" aria-label="Disable 2FA"/>
                    </div>
                    <span attrs="{'invisible': [('totp_enabled', '=', False)]}" class="text-muted">Your account is protected!</span>
                    <span attrs="{'invisible': [('totp_enabled', '!=', False)]}" class="text-muted">
                        Two-factor Authentication ("2FA") is a system of double authentication.
                        The first one is done with your password and the second one with a code you get from a dedicated mobile app.
                        Popular ones include Authy, Google Authenticator or the Microsoft Authenticator.
                        <a href="https://www.odoo.com/documentation/16.0/applications/general/auth/2fa.html" title="Learn More" target="_blank">
                            <i title="Documentation" class="fa fa-fw o_button_icon fa-info-circle"/>
                            Learn More
                        </a>
                    </span>
                    <group name="auth_devices" string="Trusted Devices" attrs="{'invisible': [('totp_trusted_device_ids', '=', [])]}">
                        <div colspan="2">
                            <field name="totp_trusted_device_ids" nolabel="1" colspan="4" readonly="1">
                                <tree create="false" delete="false">
                                    <field name="name" string="Device"/>
                                    <field name="create_date" string="Added On"/>
                                    <button type="object" name="remove" title="Revoke" icon="fa-trash"/>
                                </tree>
                            </field>
                            <button name="revoke_all_devices" string="Revoke All" type="object" class="btn btn-secondary" confirm="Are you sure? You may be asked to enter two-factor codes again on those devices"/>
                        </div>
                    </group>
                </div>
            </group>
        