Can't reset password on meta

Contribute Bug

AI-generated summary

A user, pfaffman, reports being unable to reset their password on Meta, receiving an ‘invalid code’ error despite multiple attempts in incognito mode. Lindsey investigates, asking for repro steps and noting that the issue might be due to a used code. pfaffman confirms they haven’t used the code and suspects possible issues with their account’s age, email setup, or 2FA configuration, but remains unable to resolve the problem.

1

This seems improbable to to be my fault somehow, but I’ve tried several times in a logged in session and in a Linux Chrome incognito window and can’t set a password. I get to the set password screen and then it says invalid code. :person_shrugging:

The image shows a form for setting a new password, indicating that the entered authentication code is invalid as each code can only be used once. (Captioned by AI)
The image shows a form for setting a new password, indicating that the entered authentication code is invalid as each code can only be used once. (Captioned by AI)445×253 11.9 KB

I’ve been fussing with passkeys for a while, so maybe I hit some kind of rate limit and the error is misleading?

3 Likes
3

@pfaffman Is this still happening? Can you walk through the exact repro steps? When I tried the following in an incognito Chrome window, I didn’t get any error:

  1. On meta.discourse.org/login, click the forgot password link.
  2. In the pop-up, enter my email address.
  3. Follow link in the email.
  4. Enter my 2FA code.
  5. Create a new password.

Are you doing anything different?

1 Like
4

Jay sent me a PM with the /password-reset/ code that’s been throwing errors, and it also caused an error for me. That could be expected though if it’s already been followed to reset a password.

@pfaffman have you followed these steps again today to try to generate a new password reset code? Wondering if the issue will persist with a new reset code.

5

Of course, but I didn’t use it.

It’s possible that the browser or something pinged that URL before it got used, but I also think that it’s designed to account for that and doesn’t use it until you actually attempt to update the password.

Yes. Except I got the link by clicking the “send me a password update link” on my profile page. When I got the link I copied and pasted it into the PM that I sent you.

And then in an incognito window I clicked login, did the forgot password thing, got a link, opened it in incognito entered password that “looks good” and when I click Set Password IU get the “Invalid authentication code” message.

Maybe because there was no password because I usually use Google auth? Maybe because my account is really old and has another email address connected to it? Maybe something to do with my 2fa, which I can’t see because I don’t have a password–oh, but I must not have 2fa because if I did Google Auth wouldn’t work.

I don’t know what else I can do to help debug.

1 Like