2FA lockout solution

Wed Pamda
I wish that there was a was to do something to solve a 2FA lockout, like a verification method, like: Email, or a security question, or something like that. Many people have been locked out of an account (including me) due to a 2FA lockout, so if you guys were to implement something to help victims of a 2FA locked it would help people out alot!
140

Comments

74 comments

Date Votes
  • Kitten

    google auth does not do much if you get a new phone you will lose all of your codes. i have 3 accounts on my auth epic games, discord, and another one and i no longer have my discord epic was nice and removed google auth for me. but discord will not do that. (also im on my gf's account dont ask me about the user name i wont answer any questions) 

    1
  • Creak

    You can submit a request to support stuff, but they will tell you:"we cannot do anything, bla bla bla, we have special security politics to make experts laugh on Defcon conference"
    The only way to recover your 2FA locked out account is finding c-management phone numbers and call em ALL.

    Or you can be an influencer and they will recover your account in 30minutes(real story),but you wouldn't be here if you were an influencer or someone with real power.

    This message will end like mine support ended his message to me.

    GOOD LUCK,
    [supports name]

    1
  • Happygoluckyfox2

    Creak how do you even contact c-management?

    1
  • Luna
    • Edited

    This just happened to me a few weeks ago. I have a TON of school related stuff on my account that I want/need access to again. All I get are condescending replies from support. Cant believe it’s been over 2 years and they still haven’t done anything about this. I really don’t want to ever use discord again because of this bs. Can’t believe how laughable their security system is. Really shows what kind of company they are now.

    0
  • Happygoluckyfox2

    Luna I get you man. It sucks a lot. I hear that if your really persistent discord might help you. But thats all I can suggest.

    0
  • Liam_

    I just got hacked and the hacker created a 2AF on my account.... CRAZY to me how for years discord have been awear of this being a problem yet they still don't do enough to fix it. How can you set up the 2AF without going through security checks of the account-linked email / phone number first. Com'on discord! So frustrating. 

    1
  • ThatKitten
    • Edited

    Can confirm still no forced SMS 2FA after lockout. Will admit that this could've been solved for me if I saved backup codes, but that shouldn't be the only thing that lets you back in if the 2FA codes don't work from Google Auth. I have a ticket open now, but we shall see how this goes. 
    Edit: Well I have 2 tickets open but last nights support staff was not helpful and that ticket is still open after 12hrs.
    Edit 2: Well this was useless and a waste of time as of this date. Turns out the backup codes could also be a one time use as well so if you use them to login or change passwords then you only an X amount of tries before you have to reset them. From support staff themselves:
    "We don't have any other alternative recovery methods at this point in time. Since Discord does not collect any personal information to tie to the account, our current policy is that your 2FA backup codes (that you download when you enable the 2FA and connect with your mobile device) act as your only form of official verification and proof that you are the owner of the account to disable the 2FA."

    0
  • SherlockTheWolf

    I just got locked out of discord today and now I am dying ._.

    0
  • SherlockTheWolf

    Although, something that almost got my account was that I checked every search platform to see if I am signed in and, fortunately, I was! UNFORTUNATELY, that web browser was microsoft edge, which is laggy asf. But I suggest you guys can try this too :D

    0
  • SherlockTheWolf

    You probably have.

    0
  • sitrik

    BUMP

    Really hope Discord can at least plan to resolve this issue soon!!! 

    2FA Lockout is so infuriating especially when it's not even the user's fault, tired of receiving the same automated responses, let's actually get this issue sorted please ...

    0
  • Yellowsam

    Same here!!!

    I lost 2 accounts!

    "I'm genuinely sorry for the inconvenience once again! We don't have any other alternative recovery methods at this point in time. Since Discord does not collect any personal information to tie to the account, our current policy is that your 2FA backup codes (that you download when you enable the 2FA and connect with your mobile device) act as your only form of official verification and proof that you are the owner of the account to disable the 2FA. So at this point in time, users must manually choose to use these backup codes to disable the 2FA on their own account and verify/confirm the disabling of the 2FA. This is a security measure to prevent unauthorized access to accounts." - Discord Staff

    0
  • sitrik

    Day forevermore of 2FA lockout

    0
  • Metroiceking

    HERE IS THE PETITION

    🚨 Attention @discord users! 🚨

     

    Are you tired of being locked out of your accounts due to 2FA issues? It's time for change! Let's urge Discord to implement a fair recovery process.
     

    Sign the petition now! 👉 https://chng.it/END2FA2DAY
     

    #END2FA2DAY #DiscordReform #FairAccess

    1

Please sign in to leave a comment.