Rayquaza01 / authenticator

Firefox addon that generates TOTPs for 2 factor authentication
https://addons.mozilla.org/en-US/firefox/addon/two-factor-authenticator/
MIT License
34 stars 7 forks source link

Kept Saying Invalid Password #17

Open Paulex-Git opened 5 years ago

Paulex-Git commented 5 years ago

Bug Report

Please fill out this information:


What is happening?

After downloading, I entered Password but it says Wrong Password. Am surprised, because that is my first time.

Is there a default password or something?


What are the steps to reproduce the bug? Download, Add to browser and try to enter password.


Rayquaza01 commented 5 years ago

Hello,

Where are you entering the password? If you're typing it into the pop-up, it will fail before you set up a password in the options (which should have been opened when the extension was installed).

To set a password, go to about:addons and then click Options next to Two Factor Authenticator. This page should have a text box for you to enter a new password.

Let me know if this helps!

Paulex-Git commented 5 years ago

Still same thing. It brought the Pop-up password field even in the addon page.

dekimpeb commented 5 years ago

I got the same issue. Password box, but never set it and keeps saying "Wrong password"

Rayquaza01 commented 5 years ago

@Paulex-Git and @dekimpeb

I don't know why it thinks you have a password set if you don't, but I've added a password reset link to the password box on the options page. It will open a new tab with a button labeled Click here to reset!. Click that and it should remove the password prompt in the future.

Let me know if this fixes it for you.

dekimpeb commented 5 years ago

@Paulex-Git and @dekimpeb

I don't know why it thinks you have a password set if you don't, but I've added a password reset link to the password box on the options page. It will open a new tab with a button labeled Click here to reset!. Click that and it should remove the password prompt in the future.

Let me know if this fixes it for you.

This helped, thanks alot! It is a great addon!

Paulex-Git commented 5 years ago

@Paulex-Git and @dekimpeb

I don't know why it thinks you have a password set if you don't, but I've added a password reset link to the password box on the options page. It will open a new tab with a button labeled Click here to reset!. Click that and it should remove the password prompt in the future.

Let me know if this fixes it for you.

Thanks, the reset sure helps to remove the Password. But if i try to ever set a password, the main issue still persists. This solution will mean, i don't get to password protect my 2FA, while others can. Thanks once again, but i still wish to password protect it.

Rayquaza01 commented 5 years ago

@Paulex-Git I'm not sure how to help with that if it's still not working. When the password is set, it stores the password's hash. When you try to unlock the extension, it checks if the hashes match. If they do, it lets you in; if they don't it displays "wrong password".

This same thing happens when you have no password set. (It compares the stored hash of "" to the hash of the password, "")

If you set a password, and enter the exact same password when unlocking it, the hashes should be the exact same, and it should let you in. This means that there is either a problem with creating the hashes (which I haven't been able to reproduce so far), or you aren't entering the same password both times.

I hate to ask this, but are you 100% certain that you didn't accidentally mistype your password?

Paulex-Git commented 5 years ago

@Paulex-Git I'm not sure how to help with that if it's still not working. When the password is set, it stores the password's hash. When you try to unlock the extension, it checks if the hashes match. If they do, it lets you in; if they don't it displays "wrong password".

This same thing happens when you have no password set. (It compares the stored hash of "" to the hash of the password, "")

If you set a password, and enter the exact same password when unlocking it, the hashes should be the exact same, and it should let you in. This means that there is either a problem with creating the hashes (which I haven't been able to reproduce so far), or you aren't entering the same password both times.

I hate to ask this, but are you 100% certain that you didn't accidentally mistype your password?

I sure enter same password each time, just not working. I am currently using it without password though.