diff --git a/services/grafana/docker-compose.yml b/services/grafana/docker-compose.yml
index 835cf34..b79c359 100644
--- a/services/grafana/docker-compose.yml
+++ b/services/grafana/docker-compose.yml
@@ -39,6 +39,8 @@ services:
     environment:
       - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD}
       - GF_USERS_ALLOW_SIGN_UP=false
+      - GF_AUTH_MULTI_FACTOR_AUTHENTICATION_ENABLED=true
+      - GF_AUTH_MULTI_FACTOR_WEBAUTHN_ENABLED=true
     ports:
       - "3000:3000" # For local testing; remove in production with nginx
     networks: