2FA total lockout solution

Hi Everybody,

I'm submitting this feedback, because of a personal experience, and also for all the people who didn't save the codes that Discord gave them, neither have the access to the device that was authenticating via an online solution (such as Google Authenticator), and also not logged in on any device with their account.

About a year and a half ago I needed to take my phone to a service, because it had issues with its battery and software, but before giving it to the hands of the technicians, I needed to factory reset it.

Now since neither the 2FA SMS authentication was a thing back then, neither I saved any of the backup codes, either from Google Authenticator, either from Discord itself, when my desktop app dropped me out (it'd do this repeatedly in every few days back in that time), I couldn't find my way back into my account, and what's more, I wasn't logged into any other device than just my phone and my desktop PC.

When this happened, I immediately contacted the support line of Discord, but they couldn't help too much more than just general help out, telling me that they can't remove the 2FA, because of security reasons.

Since Discord wasn't the only app I used that had 2FA authentication, I was in the same case with my Steam and uPlay account. But miraculously, Steam let me in after verifying that I was the one trying to get back in his account, and even uPlay let me in after contacting their support and talking it down with them.

Now I hope I can talk in the name of others too, but we'd really appriciate a solution, that would let users who went throught the same unlucky situation regain access to their accounts.

I only mentioned Steam and uPlay, because even if they let people remove 2FA after they identify themselves as the owner of the account, they are still as safety as how Discord is now.

I'm hoping to see some upvotes on my topic, and also changes in your privacy policy Discord, that makes this idea come true sooner or later!

Best of luck!

Komentarze