Questions tagged [two-factor-authentication]

Is an approach to authentication which requires the presentation of two or more authentication factors.

Two-factor authentication (TFA, T-FA or 2FA) is an approach to authentication which requires the presentation of two or more of the three authentication factors: a knowledge factor ("something the user knows"), a possession factor ("something the user has"), and an inherence factor ("something the user is").

See also and the Security.StackExchange multi-factor tag.

478 questions
138
votes
10 answers

Git authentication fails after enabling 2FA

I just enabled 2FA (I can't think of any other changes I made) and git asked for my username and password. I provided both, but they were "wrong". I tried many of the solutions here: Git push requires username and password but that didn't work. In…
Max Bileschi
  • 2,103
  • 2
  • 21
  • 19
124
votes
2 answers

Sending email fails when two factor authentication is on for Gmail

I am using my Gmail account and smtp.gmail.com inside my web application to test and send email. when two factor authentication is ON for my Gmail account, it fails to send the email, however when I turn it off, the web application sends email…
user217648
  • 3,338
  • 9
  • 37
  • 61
61
votes
6 answers

Is there a tutorial on how to implement Google Authenticator in .NET apps?

I'm looking for a tutorial on how to use Google Authenticator in .NET-apps. Does this exist, and if so, where can I find it? I understand that this can be used to add two-factor-authentication to your own apps.
Espo
  • 41,399
  • 21
  • 132
  • 159
55
votes
2 answers

Create partial login cookie for External Authentication

Recently I've implemented 2FA for my WebAPI using IdentityServer3. Everything works as expected if the login is made locally (using the IUserService). Now, I want to be able to do this login by issuing a partial login cookie. This means that I have…
46
votes
1 answer

How to add Google Authenticator to my website?

I have a web app that is Angular2 on the front-end and NodeJS on the back-end. I want to allow clients to use Google Authenticator to make their accounts more secure. How can I implement/use Google Authenticator in my website? I cannot find an API…
39
votes
1 answer

How Do Hardware Token Devices work?

Recently, my bank sent me this tiny device that generates a unique code that must be used when performing online transactions, all the device does is generate this unique code when I press a particular white button and it doesn't look like it…
39
votes
6 answers

How to add more devices to AWS root account MFA

I already have Google authenticator installed in my iPhone and I'm using it to signin to my AWS root account. I want to add the ability to login with MFA using my Android phone as well, using a corresponding token-generator Android app. Is it…
Ion
  • 1,033
  • 2
  • 13
  • 18
31
votes
2 answers

Gitlab Account 2FA lost

I have lost my Phone and do not have the recovery code for my 2FA for GitLab. So I am locked out of my account. What are my options?
JanMer
  • 1,198
  • 2
  • 17
  • 27
30
votes
5 answers

2FA give problems when pushing to GitHub

I've clone a project on GitHub on my Raspberry Pi, create a new branch and push everything to the repository. For this I needed next commands: git clone https://www.github.com/heinpauwelyn/my_repo git checkout -b raspberry git push origin…
H. Pauwelyn
  • 13,575
  • 26
  • 81
  • 144
26
votes
3 answers

Two-factor Authentication With fastlane

Im releasing my app to firebase distribution throw Fastlane while using CI machine. Im facing an issue with the 2FA. Im using Match to retrieve my certificates. This is what I have under "Appfile" app_identifier "com.example.example" # the bundle…
22
votes
2 answers

Two factor authentication with spring security oauth2

I'm looking for ideas how to implement two factor authentication (2FA) with spring security OAuth2. The requirement is that the user needs two factor authentication only for specific applications with sensitive information. Those webapps have their…
James
  • 11,654
  • 6
  • 52
  • 81
18
votes
3 answers

Apple developer Enroll with Two-Factor Authentication

This week I tried to enroll to the Apple developer program. Without that I can't publish an App to the store. When entered in the Enroll program https://developer.apple.com/programs/enroll It ask me to turn on the two-factor authentication. I did…
user3733255
  • 191
  • 1
  • 2
  • 4
18
votes
1 answer

Configure Jenkins For Github CI w/ 2FA

My Github account has two factor authorization (2fa) enabled. I want to integrate Jenkins with a few of my private repositories, but I cannot authorize them because I have 2fa enabled. Note this is a multibranch pipeline project. Any ideas how to…
Eric H.
  • 6,894
  • 8
  • 43
  • 62
16
votes
1 answer

What HTTP status to use in 2 factor authentication

My website workflow is that the user submits their username and password, then if 2 factor authentication is enabled, my website will request the user to enter 2 factor token via modal dialogue. My question is what HTTP status code should I use to…
theminer3746
  • 888
  • 13
  • 32
15
votes
0 answers

I lost my 2-factor auth app and I can't login into my heroku account

I had to factory reset my phone and I lost my two factor auth app (Google Authenticator) and now I can't login into my heroku account
1
2 3
31 32