Problem with Forgotten PW & Two-Factor Authentication

Trc4

One of our members forgot his password and reset it using "Forgot password". Unfortunately, he can't log in with it because he activated 2FA and doesn't have any data for it.

As an admin, I can't reset it. How do I proceed?

luceos

Trc4

TeamF

Please provide the name of the 2fa extension in question. Or post the output of php flarum info.

peopleinside

Hi, before do any action on the profile I suggest to verify the user email address then send an email to that address where interested user should reply to be sure to allow the access to the right account person.

You should then be able, when are you sure of the action for disable two step for the user: try to open user profile, edit profile and you should have the option to disable the two step for that user.

TeamF

We have a similar problem.

An admin no longer has any data.

I myself have changed his password in the profile. However, I get the message "You do not have permission to do this" - but it still works.

It fails at 2FA, however. Under the option "Two-Factor Authentication" it says: "Nothing to disable" even though he has definitely activated it. Now he can log in with the password, but then he can't go any further.

Can someone please help us?

clarkwinkelmann

If the options in the extension UI are not working, you will probably need to edit the database manually to disable 2FA. I am not familiar with it and I don't think there is any guide so you will need to either figure out the columns and values yourself or wait for one or the developers of the extension to chime in.