google / google-authenticator

Open source version of Google Authenticator (except the Android app)
Apache License 2.0
5.19k stars 966 forks source link

Entering a provided key: '8' or '9' characters are invalid #697

Closed LoganMcKenzie closed 4 years ago

LoganMcKenzie commented 4 years ago

When entering a provided key manually, any string with an '8' or '9' character prompts the warning: "Key value has illegal character"

I don't know if this affects QR codes as well, I tried some online QR code generators but couldn't get anything to scan successfully, so I was forced to give up.

ThomasHabets commented 4 years ago

It's base32. 8&9 are invalid.

sirStroam commented 3 years ago

I'm copy-pasting the string from an app to google authenticator and it doesn't like whenever there is an 8 typed or a 9 typed. All the other numbers work fine. This is a new phone with a default keyboard.

LoganMcKenzie commented 3 years ago

@sirStroam The app shouldn't be generating an 8 or 9 digit in the auth key because they're invalid characters in base32, it's just not well documented. Keep in mind I'm talking about a provided auth key; in a six-digit MFA code they're fine.