Hi, I want to add 2FA to my account but activating it won’t trigger my keepass app, I can see the setup code on URL which I can use it with keepass to generate tokens but website expects me to follow link so please add a manual activation for 2FA
I use keepassXC on linux.
Copy the secret key from the url.
otpauth://totp/Lemmy.world:username?secret=xxxxxxxxxxxxxxxxxxxxxxxxx&algorithm=SHA256&issuer=Lemmy.world
Paste that here:
I tried all this, I did get keepass to provide the 2FA code, but lemmy won’t accept it. I had to reset my password so I can get back in.
Same here. I added it to Keepass, then opened a private browser and tried to log in and it wouldn’t take it. So one of 2 things:
- Most sites have you enter a code to validate that you have it right before applying the changes to your account - I did not get this in Lemmy
- They simply don’t validate that you have 2FA set up correctly by asking you for a code prior to actually enabling it on your account and the log in with 2FA is broken.
I went ahead and removed 2FA so I wasn’t locked out of my account if I get logged out somehow until this is fixed.
Yeah, I don’t know why they wouldn’t just generate a QR code that you can scan with your phone or give you the secret in text, like every other website does.
I wouldn’t use 2fa until it requires a successful code check on setup, at this point you won’t know whether you’ve successfully enabled 2fa or locked yourself out until you next try to log in.
See https://lemmy.eus/post/190738 for details.
