Wrong OTP, logs in anyway

  • Resolved oneiroi17

    (@oneiroi17)


    6 years, 8 months ago

    As in the title – I had this plugin set to enabled on my user profile, it asked me for my OTP (I use the Google Authenticator app), I typed it in wrong and it logged me in anyway. I have tested this more times using different browsers as well as incognito mode, and each time it simply logs me in.

    I believe all my settings are correct, and in the plugin settings the “current OTP” matches the one in the GA app. but I assume I must be missing something…?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    Does the same happen if you de-activate all your other plugins?

    Thread Starter oneiroi17

    (@oneiroi17)

    Just tested and yep, same thing when everything else is deactivated.

    Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    So, it happens for you on a default/blank install? I’ve just tried one via a fresh install at https://poopy.life/create , but it works for me.

    You don’t have any browser extensions which automatically supply TFA codes for you? We’ve previously seen a user who had a browser extension which automatically + invisibly corrected their wrong password for them after they’d typed it in.

    Failing that, are you able to set me up a blank install on the same hosting so that I can take a look? (If so, I will advise how to send me the credentials).

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Wrong OTP, logs in anyway’ is closed to new replies.