Not a bug 2FA Bypassed when Board Closed

Liam W

Well-known member
While this board was closed, I was able to login without being asked for my 2FA code.

Liam
 

Chris D

XenForo developer
Staff member
You would have been logged out because the remember system for cookie logins has changed.

However, nothing has changed with the 2FA device cookies, so if you have 2FA authenticated in the last X days then there's no need to ask you again.
 

Liam W

Well-known member
You would have been logged out because the remember system for cookie logins has changed.

However, nothing has changed with the 2FA device cookies, so if you have 2FA authenticated in the last X days then there's no need to ask you again.
That would explain why I was still asked for it in a private browser.

Liam
 

Fred.

Well-known member
I was logged out, I just logged back in and 2FA is still enabled so it works fine.
 
Top