this post was submitted on 11 Jul 2023
3 points (100.0% liked)

Lemmy.ca Support / Questions

522 readers
1 users here now

This community is for support requests specific to lemmy.ca.

If you need to contact an admin privately, please message @[email protected].

If you are a technical user and you have questions or need support with the Lemmy software itself, please visit [email protected].

founded 4 years ago
MODERATORS
smorks
TruckBC
Shadow
admin
mp3
otter
3
2 factor authentication not working (self.lemmy_ca_support)
submitted 2 years ago by TheSecondSeige to c/lemmy_ca_support
5 comments fedilink hide all child comments
 

As title mentions I can’t get into my main account after enabling 2 factor authentication.

I am using Google Authenticator 6.0 the code appears there as expected. However when I provide it to either the browser login screen on yny desktop or Jebora on my phone then select the log in button nothing happens.

It doe not indicate it is the wrong code, nor does it give any error messages.

Chromes debug console a 400 (Bad request) with error: “incorrect_totp token”

I assume this means it doesn’t like the authentication code I am providing. Though I’m not quite sure what it’s expecting.

top 5 comments
sorted by: hot top controversial new old
[–] smorks 2 points 2 years ago (1 children)

it could be that Google Authenticator doesn't support the SHA256 digests for the TOTP codes that lemmy generates? there's a bit more info here: https://github.com/LemmyNet/lemmy/issues/3309

i've heard that Authy doesn't support it either.

[–] TheSecondSeige 1 points 2 years ago (1 children)

Thanks. I didn't even really pick Google Authenticator. After turning on 2 factor via Jebora it just opened up the app and the code was there.

I guess this means that account is locked untill they fix it or would there be an alternative way in?

[–] smorks 2 points 2 years ago (1 children)

do you know if you have an e-mail address setup on the account? if so, you can reset your password which I think also bypasses the 2FA (which isn't great either, but 🤷)

[–] TheSecondSeige 2 points 2 years ago

That worked! Thank you for the suggestion. It even let's you use the same password

[–] sleet01 2 points 2 years ago

I've noticed there's a bug in the newest Google Authenticator where it displays an old code despite the ticker refreshing; I now have to close and restart Google Authenticator every. single. time. that I use it.