Two-Factor Authentication + Recovery Keys not working

  • Resolved Vedran BB

    (@budocro)


    5 years, 4 months ago

    Hi,

    I just activated “Two-Factor Authentication” option and it seems that something is wrong.

    When I need to enter “2FA Code” which is generated by Google Authenticator nothing happens. When generated (before valid) code is expired and I try to enter that expired code again, I get error:
    “VALIDATION FAILED: The 2FA code could not be validated. Please try logging in again.”

    If I try to use one of recovery keys, I get again the same error:
    “CODE INVALID: The 2FA code provided is either expired or invalid. Please try again.”

    Any ideas?

    Tested with: Google Chrome, Firefox, Internet Explorer + Mobile: Google Chrome

    For now I just disabled WordFence plugin from plugin DB table.

    Thank You!
    —
    Best Regards,
    Vedran BB

    • This topic was modified 5 years, 4 months ago by Vedran BB.
Viewing 5 replies - 1 through 5 (of 5 total)

  • Hey @budocro,

    The fastest way back into your site would be to use ftp/sftp to access the web server, rename the Wordfence directory in wp-content/plugins, then log in. Renaming a plugin directory immediately deactivates the plugin. Once you access the site you can rename the Wordfence folder again and then activate the plugin.

    Once you’re back in and have reenabled Wordfence can you make sure your server and device times are in sync? You can find the server time in Settings > General or Wordfence Login Security.

    If the times are in sync are you able to check for a plugin conflict? Try temporarily switching to a default theme if you’re not already using one and disabling all other plugins to see if it resolves the issue.

    Please let me know how it goes.

    Thanks,

    Gerroald

    Thread Starter Vedran BB

    (@budocro)

    Hi Gerroald,

    Thank you for your support!

    I can confirm that there is a conflict between WordFence and Google Analytics Dashboard for WP by ExactMetrics (formerly GADWP) plugin.

    Thanks,
    Vedran BB

    Hey @budocro,

    Thanks for the update, and happy to hear you were able to track this down.

    Also, thanks for sharing this, I’ll make note of it.

    Thanks,

    Gerroald

    “Once you’re back in and have reenabled Wordfence can you make sure your server and device times are in sync? You can find the server time in Settings > General or Wordfence Login Security.”

    OK, I checked the time but it looks like it’s not in synk.
    Server Time: 2019-10-17 19:56:30 UTC (2019-10-17 21:56:30 Europe/Stockholm)
    What should I do about it?

    Good Day. This is STILL a problem and am I now giving up on it. I had a dozen sites I had to undance 2FA on after setting them up and testing them without problem yesterday.

    I have written up this article and created a video explaining the problem and the fix but it is quite annoying

    https://www.urtech.ca/2019/12/solved-video-2fa-cannot-be-verified-or-verification-required-additional-verification-is-required-for-login/

    Hopefully this helps others.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Two-Factor Authentication + Recovery Keys not working’ is closed to new replies.