Locked out of a Discourse forum due to passkey bug?

[pmusaraj (Penar Musaraj)]

@digitaltoast

It then gives a rather confusing screen which says:

"When you have your physical security key or compatible mobile device prepared press the Authenticate with Security Key button below."

But there is no “Security Key button”, but a space to enter something, (<p class="second-factor__description">) and a “finish login” button below it.

Any chance you can post a screenshot of this screen? From what I can tell, your account is in an unusual state. It feels like one part of the app has a record of the 2FA key, but not the other part. A bit hard to explain, but on the Discourse side there are two concepts: security keys and second factor methods (one of which is security keys, the others are TOTP and backup codes).

@digitaltoast

is it possible that option wasn’t on that page at that time?

IIRC, yes, there was a short window where the UI for backup codes was not encouraging enough to users, in other words, I believe for a short period of time, the backup code generation was somewhat hidden.