this post was submitted on 17 Jul 2023
134 points (100.0% liked)

Blahaj Lemmy Meta

2445 readers
30 users here now

Blåhaj Lemmy is a Lemmy instance attached to blahaj.zone. This is a group for questions or discussions relevant to either instance.

founded 2 years ago
MODERATORS
 

We've had several people reach out to us who have accidentally locked themselves out of their account whilst trying to setup 2 factor authentication.

Whilst it is possible for us to disable 2fa for an account directly from the database, for privacy and security reasons, we won't do this at the request of an external/second account.

However, all is not lost! Enabling 2fa will not log you out of existing sessions, so if you make sure you are logged in to a second browser before enabling 2fa, you will be able to disable it again if you run in to any issues.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 12 points 2 years ago (1 children)

If you have an email address associated with your account you can follow the “forgot my password” account recovery process. This will log you in without prompting for your 2fa.

I’m not sure it’s great security, but it is a self-service recovery option if 2fa has locked you out.

[–] [email protected] 1 points 2 years ago (2 children)

I have completed that process and upon login I am still being prompted for 2fa that I did not set up.

[–] [email protected] 4 points 2 years ago (1 children)

Here’s the process I used a few weeks ago. I’m going from memory and things may have changed since then, this may no longer work.

  1. Click “forgot password” on the login page of your instance.
  2. Enter your email address
  3. Click the link you receive in your email
  4. Enter your current password in both fields and click Save
  5. You will be logged in. Go to your settings and disable 2fa.
[–] [email protected] 5 points 2 years ago (1 children)

Thanks for this. I'll keep it in the toolbox of things I get people to try

[–] [email protected] 1 points 2 years ago

Did this, see above. Did not work.

[–] [email protected] 1 points 2 years ago

That's an interesting way to handle the issue