<?xml version="1.0"?>
<xpath expr="//page[@name='preferences']" position="after">
                <page string="Account Security" name="security" attrs="{'invisible': [('id', '=', False)]}">
                    <field name="totp_enabled" invisible="1"/>
                    <!-- For own user, allow to activate the two-factor Authentication -->
                    <div>
                        <div class="o_horizontal_separator d-flex align-items-center mt-2 mb-4 text-uppercase fw-bolder small">Two-factor Authentication
                                <div attrs="{'invisible': [('totp_enabled', '!=', False)]}">
                                    <button attrs="{'invisible': &quot;[('id', '=', uid)]&quot;}" name="action_totp_enable_wizard" disabled="1" type="object" class="fa fa-toggle-off o_auth_2fa_btn disabled" aria-label="Enable 2FA"/>
                                            <button attrs="{'invisible': &quot;[('id', '!=', uid)]&quot;}" name="action_totp_enable_wizard" type="object" class="fa fa-toggle-off o_auth_2fa_btn disabled pe-auto" aria-label="Enable 2FA"/>
                                </div>
                                <button attrs="{'invisible': [('totp_enabled', '=', False)]}" name="action_totp_disable" type="object" class="fa fa-toggle-on o_auth_2fa_btn text-primary enabled" aria-label="Disable 2FA"/>
                            </div>
                            <span attrs="{'invisible': [('totp_enabled', '!=', False)]}" class="text-muted">
                                Two-factor Authentication ("2FA") is a system of double authentication.
                                The first one is done with your password and the second one with a code you get from a dedicated mobile app.
                                Popular ones include Authy, Google Authenticator or the Microsoft Authenticator.
                                <a href="https://www.odoo.com/documentation/16.0/applications/general/auth/2fa.html" title="Learn More" target="_blank">
                                    <i title="Documentation" class="fa fa-fw o_button_icon fa-info-circle"/>
                                    Learn More
                                </a>
                                </span>
                                <span attrs="{'invisible': [('totp_enabled', '=', False)]}" class="text-muted">This account is protected!</span>
                            </div>
                        <group name="auth_devices" string="Trusted Devices" attrs="{'invisible': [('totp_trusted_device_ids', '=', [])]}">
                            <div colspan="2">
                                <field name="totp_trusted_device_ids" nolabel="1" colspan="4" readonly="1">
                                    <tree create="false" delete="false">
                                        <field name="name" string="Device"/>
                                        <field name="create_date" string="Added On"/>
                                        <button type="object" name="remove" title="Revoke" icon="fa-trash"/>
                                    </tree>
                                </field>
                                <button name="revoke_all_devices" string="Revoke All" type="object" class="btn btn-secondary" confirm="Are you sure? The user may be asked to enter two-factor codes again on those devices"/>
                            </div>
                        </group>
                </page>
            </xpath>
        