this post was submitted on 29 Jun 2023
1 points (100.0% liked)
bless this jank
106 readers
1 users here now
post instance suggestions and complaints here
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
https://github.com/LemmyNet/lemmy/issues/3325 holy fuck that’s bad, lemmy generates TOTP links that don’t work with most authenticators and doesn’t verify with an initial 2fa code before enabling it
@[email protected], you may be able to unlock your original account if you do the “forgot my password” flow, which apparently lets you disable 2fa (which also feels pretty insecure). that’ll require your account to have an email associated with it though. otherwise as soon as I’m at my computer I’ll run the query in that github issue to disable 2fa on your account and ping you when it’s fixed.