diff --git a/src/config/tfa.rs b/src/config/tfa.rs
index aa7677fd..d89b53db 100644
--- a/src/config/tfa.rs
+++ b/src/config/tfa.rs
@@ -288,9 +288,8 @@ impl proxmox_tfa::api::OpenUserChallengeData for UserAccess {
         }
     }
 
-    // TODO: enable once we have admin ui stuff to unlock locked-out users
     fn enable_lockout(&self) -> bool {
-        false
+        true
     }
 }