Two Factor Authentication

[pisces_bass]

I was able to log in using google authenticator from my phone. Tried the same process on my iPad but the code is not accepted. Any suggestions?

I don’t have a backup code in my email. Nothing in my spam.

 

[Eli Brockway]

You’ve only been a member for a few years (2019) and have only 1 feedback rating. The fellow that you replied to is even younger, with an account started only in 2022 and has no feedback rating at all.

Y’all lose almost nothing if you just create a new account and set it up correctly from the start. This is a non-issue for you and others in your situation.

Couldn't care less about the feedback ratings because I don't do much buying and selling on here—but I would rather keep access to my messages with people and all that, so no, it's not really a non-issue from my perspective. I also doubt that it's something impossible for Paul or any of the other administrators to go in and fix (already put in a help ticket once I realized it), but going from realizing that a formerly supported login method is now not supported, to being unable to even change my account, to the new 2FA requirement is certainly cause both to gripe and make fun of myself.

 

[superheavyfunk]

Couldn't care less about the feedback ratings because I don't do much buying and selling on here—but I would rather keep access to my messages with people and all that, so no, it's not really a non-issue from my perspective. I also doubt that it's something impossible for Paul or any of the other administrators to go in and fix (already put in a help ticket once I realized it), but going from realizing that a formerly supported login method is now not supported, to being unable to even change my account, to the new 2FA requirement is certainly cause both to gripe and make fun of myself.

Fair enough. Hopefully it gets sorted for you

 

[Killing Floor]

Jaco only needed one factor

 

[red_rhino]

Apple users have a great tool for this built right into their OS too.

THIS^^^^. If you're in the Apple ecosystem, and you're not already using another 2FA authenticator app, I recommend using the built-in Passkeys feature. There's a decently written article here that can help you get going. Passkeys can also be used on Windows. Supposedly works on Chrome as well. I've also used it to login via FireFox.

I was able to get this set up and working across all my devices within just a few minutes. It works really well.

So I can't add a password without going through an email I can't get into, I can't change the email without having a password, and of course there's no way I'm able to log in without a password if I ever get logged out, let alone any of the new 2FA fun.

This is exactly the sort of problem the mods are trying to address. Your account sounds like a wonderful candidate for a hijacking and exploitation of the TB Classifieds. That you no longer have access to the email address you used to set your account (yahoo, perhaps?), means that someone else who gains access can use the info that's probably still in your old inbox to impersonate you, even taking control of your TB account. ("Free" email accounts are also why using email for 2FA is not a best practice.)

Do what you can to recover access to your email account via security questions, etc, then update your profile to use an email you do control and enable 2FA.

 

[Eli Brockway]

This is exactly the sort of problem the mods are trying to address. Your account sounds like a wonderful candidate for a hijacking and exploitation of the TB Classifieds. That you no longer have access to the email address you used to set your account (yahoo, perhaps?), means that someone else who gains access can use the info that's probably still in your old inbox to impersonate you, even taking control of your TB account. ("Free" email accounts are also why using email for 2FA is not a best practice.)

Do what you can to recover access to your email account via security questions, etc, then update your profile to use an email you do control and enable 2FA.

Well aware of the potential issues there, and that's also why anywhere I do have 2FA I use an app for it rather than just my email.

My issue mostly comes down to the fact that every attempt I've gone through with Yahoo's customer service to regain access to that account has never gone anywhere, so my hope mainly comes down to the administrators being able to just change it over to the email account I actually use so that I can get things up and running properly.

I just don't want to lose all my private messages on here, which is why I don't want to make a new account like was already suggested. ¯\_(ツ)_/¯

 

[5StringBlues]

Jaco only needed one factor

Kubicki?

 

[mikewalker]

Well, setting up 2FA (google auth plus email) went flawlessly for me. I'm glad its only once every 30 days (on the four different machines that I cycle through at home).

At my current day-job, on top of 14-character strong password policies plus 2FA on everything, we are implementing a new protocol for all my admin system logins (about 20 of them) which forces me to log in to yet another tool that generates a new very temporary "just-in-time" admin password for each system (and then destroys it when my block of time is deemed over). Soon I'll be spending about a quarter of my workday cycling through different password managers... Thanks, global cyber-crime community!!

 

[ctmullins]

Authy working just fine, first try.

 

[BuddhaFingas]

Well, now that I know this real, and not a pop-up add trying to get me to click thru/give my password...

Email code setup worked without a hitch for me. All set up.

 

[foal30]

I have managed to log in on both my phone and IPAd

I’m completely rubbish at modern technology so my policy is if I can get it to work everyone else can

Yours sincerely
Leon Trotsky

 

[SteC]

Thanks for keeping us safe Paul!

 

[amper]

FTR, I'm using Google Authenticator for the 2FA. Not that I trust Google.

 

[pisces_bass]

I was able to log in using google authenticator from my phone. Tried the same process on my iPad but the code is not accepted. Any suggestions?

I don’t have a backup code in my email. Nothing in my spam.

I used the phone login to request an email backup to use with my iPad. I’m back for now.

 

[gonzkal]

I was able to set up 2FA for my account on my laptop, but on my phone (Android, Firefox) I'm repeatedly getting an error message: every time I enter the code I get from Google Authenticator or by email, I get the pop-up "Sorry, TalkBass is not available.". Am I the only one?

Edit: Quick follow-up. It worked after I cleared my phone browser's cache. yay

Edit, 2nd round: getting those error messages on my phone again, in spite of being logged in. They pop up on a regular basis though they seem a little random. Not sure if related to 2FA, but since there are no threads about this new error message (never seen before today) I thought it would still be relevant here.

 

[paul]

I was able to set up 2FA for my account on my laptop, but on my phone (Android, Firefox) I'm repeatedly getting an error message: every time I enter the code I get from Google Authenticator or by email, I get the pop-up "Sorry, TalkBass is not available.". Am I the only one?

Edit: Quick follow-up. It worked after I cleared my phone browser's cache. yay

Edit, 2nd round: getting those error messages on my phone again, in spite of being logged in. They pop up on a regular basis though they seem a little random. Not sure if related to 2FA, but since there are no threads about this new error message (never seen before today) I thought it would still be relevant here.

It's unrelated but should be fixed now

 

[gonzkal]

It's unrelated but should be fixed now

Thank you! All good now. And 2FA works fine, thanks to you and the TB team for keeping us safe.

 

[JayDomK]

THIS^^^^. If you're in the Apple ecosystem, and you're not already using another 2FA authenticator app, I recommend using the built-in Passkeys feature. There's a decently written article here that can help you get going. Passkeys can also be used on Windows. Supposedly works on Chrome as well. I've also used it to login via FireFox.

I was able to get this set up and working across all my devices within just a few minutes. It works really well.


This is exactly the sort of problem the mods are trying to address. Your account sounds like a wonderful candidate for a hijacking and exploitation of the TB Classifieds. That you no longer have access to the email address you used to set your account (yahoo, perhaps?), means that someone else who gains access can use the info that's probably still in your old inbox to impersonate you, even taking control of your TB account. ("Free" email accounts are also why using email for 2FA is not a best practice.)

Do what you can to recover access to your email account via security questions, etc, then update your profile to use an email you do control and enable 2FA.

Personally, I don't find the Passkeys to be very convenient. I prefer to receive SMS to my phone. This works well with a google account, they always text me when I log in from a new location.

 

[TeeSee]

What's happening about this? 5th Feb has been and gone and I've not been asked once to log in with 2FA. I have it set up on Google Authenticator, but haven't yet had to verify? Not that I'm complaining though.

 

[amper]

I just have to report that, in light of what I said earlier about using multiple devices with multiple operating systems and multiple browsers on each, I set up 2FA right away, using Google Authenticator, and have already used it about a half dozen times as I switch devices and browsers, and have experienced no problems other than the minor annoyance of having to do so, in the first place.