Received an email from someone having trouble enabling 2FA - yet I don’t recall ever turning this on or setting up anything for it, do I have to?

2FA was added back in early March. See Discourse 2.0.0.beta4 Release Notes . You (a Discourse site admin) shouldn’t need to do anything. @featheredtoast may have some suggestions on what to try (or to ask the user to try) to get this working.

Thanks :slight_smile: Is there anyway we can disable it? I haven’t looked into it so not sure how it works, but I don’t like the idea of having to rely on (or send user info to) a third party.

I don’t believe it can be disabled, no. Also, no data is being sent to a third party. Here’s a quick summary of 2FA: Discourse implemented the TOTP (time-based one time password) algorithm. When a user decides to enable 2FA they are presented with a QR code (or a long string of characters). That st…

A good thing to check is whether or not the server time is in sync with the world (generally through ntp). Having an incorrect time can cause some interesting errors as this protocol is time based.

Thanks both :slight_smile: [이미지] jomaxro: Your Discourse site also knows what those codes are, so when a user tries to log in, after entering their username and password they’re asked for a code. They check their app, enter the code, and the server checks if it’s the same code it expected. D…

Ask the user to use the “Time correction for codes” operation in the app’s settings.

[이미지] AstonJ: Does it need to connect to a third party to learn/check what those codes are? Or is it all generated on my server? Not at all - it is 100% on the server. [이미지] AstonJ: Just checked the time and it’s fine… would timezones matter? No. It’s based off UTC; not local time. W…

Hey, is it possible for an admin to turn off someone’s Two Factor Authentication? It doesn’t seem there is an option to do this, but one of our community is locked out and cannot get in as he has his 2FA setup.

It is not possible to disable 2FA from the user interface - doing so requires rails console access. See How to disable 2FA - #11 by featheredtoast

A little update on this one - admins can now disable 2FA for other users from each user’s /admin/users page. :+1:

2FA - do we have to do anything to enable it?

제품 지원

jomaxro (Joshua Rosenfeld) 2월 19, 2020, 12:25오후 10

사용자 인터페이스에서 2FA를 비활성화할 수 없으며, 이를 수행하려면 rails 콘솔 접근 권한이 필요합니다. How to disable 2FA - #11 by featheredtoast 를 참조하세요.

글		댓글	조회수
Locked out of own forum. Asking for two-factor verification I never set up. Help : ) Product Support	6	675	9월 30, 2022
Disable two factor auth with only backup codes Product Support	9	1501	3월 5, 2019
Cannot disable 2FA for User Product Support	5	993	2월 5, 2021
Two factor auth consistently returns invalid authentication code Product Support	11	2811	6월 14, 2018
Disable 2FA via console Self-Hosting how-to	0	2818	4월 17, 2020

2FA - do we have to do anything to enable it?

Related topics