Not a bug 2FA Bypassed when Board Closed

Liam W

in memoriam 1998-2020
Licensed customer
While this board was closed, I was able to login without being asked for my 2FA code.

Liam
 
You would have been logged out because the remember system for cookie logins has changed.

However, nothing has changed with the 2FA device cookies, so if you have 2FA authenticated in the last X days then there's no need to ask you again.
 
You would have been logged out because the remember system for cookie logins has changed.

However, nothing has changed with the 2FA device cookies, so if you have 2FA authenticated in the last X days then there's no need to ask you again.

That would explain why I was still asked for it in a private browser.

Liam
 
I was logged out, I just logged back in and 2FA is still enabled so it works fine.
 
Back
Top Bottom