search

mozilla / fxa

Monorepo for Mozilla Accounts (formerly Firefox Accounts)
https://mozilla.github.io/ecosystem-platform/
Mozilla Public License 2.0
594 stars 210 forks source link

Can't setup 2FA - won't accept backup code #17853

Open jbirnick opened 4 days ago

jbirnick commented 4 days ago

Description

I just created a Mozilla Account to publish my add-on. For publishing my add-on, I need to setup 2FA. However, after confirming a 2FA code, it would ask me to confirm with a backup code. And then no matter what backup code from the previous page I give them, it would always just say "there was a problem confirming your backup authentication code".

I found another user on reddit who had the same problem a month ago: https://www.reddit.com/r/firefox/comments/1f8g4pb/cant_add_2fa_to_mozilla_account/

image

Steps to reproduce

Create a new Mozilla account and try to setup 2FA.

Environment

Arch Linux. Tried with both Firefox and Chromium.

┆Issue is synchronized with this Jira Task

### Tasks
ReneDussault commented 4 days ago

i have the exact same issue. copy pasted from the codes, but at step 3, nothing works. had to wait 15 minutes, then tried again with authy, code gets generated, enter the authy code, everything is fine.. then we get to the backup code, copy directly from the window that asks you to download and backup this file.. then add one of the code into step 3, fail

jbirnick commented 4 days ago

Yeah same.

ReneDussault commented 4 days ago

Yeah same.

it JUST allowed me to make it happen. im not sure why, but now it works... idk, weird bug

clouserw commented 1 day ago

99% of the time issues like these are that a clock on one of the devices is off. Even a few seconds can matter. Would you verify that your devices clocks are accurate and sync'd to a timeserver?

jbirnick commented 1 day ago

I don't think it was related to that; it also worked for me when it worked for ReneDussault.

Also, for the backup codes it should not be related to any timing, right? Again, providing the 6-digit authentication code did work, but providing the backup code (which is not timing-based) did not work.

clouserw commented 1 day ago

Right. Timing only matters for the 2FA codes

clouserw commented 1 day ago

Looks like #17799 might be related also

jbirnick commented 1 day ago

Yeah that's the same thing.

gustavoeso commented 2 hours ago

I got the same thing, try to setup, won't accept recovery codes for some reason