The ability for alternate methods to authenticate are not appearing on email nor Authenticator Apps but are for no protection. This is of risk for in case of issues with my authenticator app where I need to change my method. Plus, without these methods, backup codes are just paperweights in that case.
Expected behavior
If it were to work properly, the ability to find alternative authentication methods would appear.
Hi @Tech4Jake and thanks for reaching out!
When you have Authenticator App 2SV enabled, we do not allow less-secure methods to pass 2SV prompts by design.
If you have set up a Passkey in the past, the option to use a Passkey should appear in many cases where we prompt for an Authenticator App code.
Additionally, you would be able to use Backup Codes when:
Hope this helps and please feel free to reach out with any additional questions!
Hello @ttaahw and thanks for responding!
I am glad you made this clear for me! However, when I try to set up a passkey, it requires me to use an authenticator app. If someone were to have authenticator app issues (like me at the moment), they could not even set a passkey. (plus, it doesn’t allow alternate methods)
Additionally, if I wanted to change my email to be able to set up my new email for easier alternate methods, it requires I use my authenticator app still.
The only one that lets me use other methods (backup codes) is no protection, and even then, that’s a concern for last second hijackings at any moment (as someone who holds hundreds-of-dollars in value with limiteds).
Is it possible for there to be a method to scan a QR code as an alternative? Or be able to use backup codes when changing email addresses or setting passkeys? (as backup codes should only be known by the holder and no one else if properly secured). As in order to change usernames, you have to use an authenticator app (which mine is currently not working and does not allow another method to even add a new email for alternative login). If I were to be able to log in through phone number (such as message codes). I would to be able to do so as my phone number is still accurate.
If I’m understanding the scenario correctly, what I would suggest is using one of your backup codes to disable Authenticator App 2SV.
You can do this by selecting the “None” option on the Security page and then clicking “Use another verification method” when the 2SV prompt pops up.
Then you can re-configure Authenticator App 2SV from scratch and/or make other desired changes on your account without 2SV (such as adding a passkey).
I had the thought but thought it was risky. But since you mentioned it, I did it anyway and got it working. Now my authenticator app is working and I got my username changed to what I wanted! Thanks @ttaahw !
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
