diff --git a/addons/auth_totp_mail_enforce/models/res_config_settings.py b/addons/auth_totp_mail_enforce/models/res_config_settings.py
index 7a84bf99b72..90b2b8aed37 100644
--- a/addons/auth_totp_mail_enforce/models/res_config_settings.py
+++ b/addons/auth_totp_mail_enforce/models/res_config_settings.py
@@ -21,7 +21,7 @@ class ResConfigSettings(models.TransientModel):
     @api.onchange('auth_totp_enforce')
     def _onchange_auth_totp_enforce(self):
         if self.auth_totp_enforce:
-            self.auth_totp_policy = 'employee_required'
+            self.auth_totp_policy = self.auth_totp_policy or 'employee_required'
         else:
             self.auth_totp_policy = False