---
title: "Important: #94312 - Removed BE/loginSecurityLevel and FE/loginSecurityLevel options"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:important-94312"
source: "Changelog/11.3/Important-94312-RemovedBEloginSecurityLevelAndFEloginSecurityLevelOptions.rst"
modified: "2026-09-15T10:46:36+00:00"
---

# Important: #94312 - Removed BE/loginSecurityLevel and FE/loginSecurityLevel options

See [forge#94312](https://forge.typo3.org/issues/94312)

## Description

The `FE/loginSecurityLevel` and `BE/loginSecurityLevel` options were used to
define the security level of the backend and frontend login. Since dropping
the two possibilities `challenged` and `superchallenged` in v7, `rsa` and
`normal` were the only two valid values left.

The `rsa` value however also became more or less obsolete, after dropping
`EXT:rsaauth` from Core in [forge#87470](https://forge.typo3.org/issues/87470). Setting `rsa` therefore only had
effect in case the standalone `friendsoftypo3/rsaauth` extension was installed.

Finally, with [forge#94279](https://forge.typo3.org/issues/94279) also the support for the standalone
`friendsoftypo3/rsaauth` was abandoned, making the `loginSecurityLevel`
option superfluous, as `normal` was left as the only valid option.

Therefore, both options `FE/loginSecurityLevel` and `BE/loginSecurityLevel`
have been removed. As a result and to follow our backwards-compatibility promise,
all authentication services will still receive the `$passwordTransmissionStrategy`
argument in their `processLoginData()` method, which however will now
always be `normal`.

## Impact

The options have been removed from the TYPO3's default configuration.
When those options have been set in your `LocalConfiguration.php`
or `AdditionalConfiguration.php` files, they are automatically
removed when accessing the Install Tool or System Maintenance area.