# InvalidParameters when confirming new Email with Security Key

**URL:** https://meta.discourse.org/t/invalidparameters-when-confirming-new-email-with-security-key/293266
**Category:** Bug
**Tags:** email, 2fa
**Created:** [January 29, 2024, 10:19am UTC](https://meta.discourse.org/t/invalidparameters-when-confirming-new-email-with-security-key/293266 "2024-01-29T10:19:59Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![sutterseba](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sutterseba](https://meta.discourse.org/u/sutterseba)
#### Post date: [January 29, 2024, 10:19am UTC](https://meta.discourse.org/t/invalidparameters-when-confirming-new-email-with-security-key/293266/1 "2024-01-29T10:19:59Z")

</div>

I am using 2FA with a YubiKey 5 on my admin account. When I try to add an email address and confirm it, I am asked to authenticate with the security key (which is good), but it always results in a Discourse:InvalidParameters error.

 ![Screenshot 2024-01-29 at 11.13.48](https://global.discourse-cdn.com/meta/original/4X/f/e/6/fe66a59d8cfda8d7bdbca6880af15c57becf83c6.png)

 ![Screenshot 2024-01-29 at 11.13.55](https://global.discourse-cdn.com/meta/original/4X/3/7/e/37ebddab57f37d4b978ce19b155e1509831d76c7.png)

Granted, this is quite an edge case, but it has been bugging me for a while now, so I thought I should let you know. I was able to circumvent this by removing the security key and re-adding it after the email confirmed.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [January 29, 2024, 10:56am UTC](https://meta.discourse.org/t/invalidparameters-when-confirming-new-email-with-security-key/293266/2 "2024-01-29T10:56:26Z")

</div>

Thanks for reporting @sutterseba. We have another topic tracking the issue, so I’m gonna close this one out.

> [@Unable to confirm alternate email (redux)](https://meta.discourse.org/t/unable-to-confirm-alternate-email-redux/291196):
>
> Using a 2FA-enabled account (security key), I’m unable to add an additional email address to my profile. When clicking the “Authenticate with Security Key” button on the confirmation page, an error message is shown: You supplied invalid parameters to the request: Discourse::InvalidParameters. This issue has been [reported](https://gitlab.torproject.org/tpo/tpa/team/-/issues/41461) in relation to our self-hosted instance at forum.torproject.org, but I was also able to reproduce right here on meta. The issue was previously reported and subsequently fixed…

Hoping to have a fix merged in the next day or two.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [January 29, 2024, 10:56am UTC](https://meta.discourse.org/t/invalidparameters-when-confirming-new-email-with-security-key/293266/3 "2024-01-29T10:56:30Z")

</div>