twrecked / hass-aarlo

Asynchronous Arlo Component for Home Assistant
GNU Lesser General Public License v3.0
397 stars 79 forks source link

Arlo 2FA #450

Open stevepridemore opened 3 years ago

stevepridemore commented 3 years ago

I have found that you can now disable Arlo 2FA after it has been enabled.

twrecked commented 3 years ago

Funnily enough I noticed I managed to turn it off on one of my test accounts and it kept working. I'll add a note to the docs.

AlanStout commented 3 years ago

How do you disable it then please

twrecked commented 3 years ago

You used to be able to do it from the website but it looks like it's gone. I'll poke around and see if I can find it.

webbpage commented 3 years ago

It is not possible to disable 2FA as of July 2021. I just got off the phone with Arlo support to confirm. I tried to create a new account but that also forces 2FA before even accessing the my.Arlo dashboard.

wierts commented 3 years ago

Hi, I have the same issue that i cannot get my Arlo to work. The message i get is 2fa failed. I have a seprate gmail account just for the homeassistant integration. i added all the additional info in my configuration.yaml file

any suggestion are welcome

Below my yaml file

 tfa_type: email
  tfa_host: imap.gmail.com
  tfa_username: Homeassistant***@gmail.com
  tfa_password: Password
twrecked commented 3 years ago

You might need another option:

  tfa_source: imap
  tfa_type: email
  tfa_host: imap.gmail.com
  tfa_username: !secret imap_username
  tfa_password: !secret imap_password
mikesalz commented 3 years ago

I was having a ton of trouble with this, and finally figured it out. I had to go to https://myaccount.google.com/notifications and enable this setting:

image

twrecked commented 3 years ago

Forgive me if you already did this but with gmail I recommend turning on single app passwords. You can see here on how to do it.

mikesalz commented 3 years ago

Thanks @twrecked. I did see that in one of your previous posts. I'm just not sure I understand how and where to use an App Password. I have an iPhone, which appears to make a difference.

twrecked commented 3 years ago

An app password is a second (or more) password you can associate with your gmail account. Gmail won't do any additional verification of its own when you use this password. You can't use it to login into your Google account but you can use it to get to your email via IMAP. You sometimes need this with 3rd party email clients.

So you'd create an app password and use that in the aarlo config as the tfa_password.

But if you have it working thats great.

mikesalz commented 3 years ago

It is working, but Google has gone out of the way to point out that it is not secure. I don't think I can create an App Password because I do not use Android devices.

The instructions say:

When to use App Passwords Tip: iPhones and iPads with iOS 11 or up don’t require App Passwords. Instead use “Sign in with Google.”

It also says:

Under "Signing in to Google," select App Passwords.

But I don't have App Passwords as an option under that heading. Do you think I am missing something, or is it because I don't use Android?

sdeagh commented 3 years ago

@mikesalz You need to enable 2FA on your google account as well, then you will see the App Passwords section Screenshot 2021-08-16 at 13 32 57