2FA logins not working in 2.11

[misaochan]

A report from one of our users:

I had trouble with the app and then uninstalled and reinstalled but I simply cannot log in. (I have 2FA enabled). I can login via browser the app simply says failed login (and then too many failed logins)

[maskaravivek]

@misaochan Is this happening for all users? Can someone with 2FA enabled try to reproduce the issue in a debuggable app and share the logs.

[misaochan]

I meant to test that, but I've had 2FA off for a while. Will try to reenable 2FA on my account and re-test soon.

[iwean]

@misaochan Is this happening for all users? Can someone with 2FA enabled try to reproduce the issue in a debuggable app and share the logs.

It happened to me too. So I disable my 2FA then login to the app... but I must write down my token again because it changed when I enable 2FA again. 🤣

[PavelAplevich]

@misaochan I think, i know what the problem. Password of this user got into list of commonly used passwords. I have this problem today. If i tried login with "popular password", app write "error" and this all.

Why did it happen: " I tried login in prod version with my beta account, and do it many times. My password blocks and go into LIST OF BAD PASSWORDS :D "

User can reset they password and all be OK, i think

[sivaraam]

@PavelAplevich I suspect the recent expansion of the Common passwords list (Ref: Phab ticket, Tech News) is the reason behind this issue. That's because it seems to have happened just very recently. Though, I'm not very sure about it. 🤔

[PavelAplevich]

When i try login with my "bad" password, i see "connection error"(mb another, i'm not sure) and that all. And i think this is problem. User doesn't understand what happened. I read my AndStudio logcat and can understand the problem, but user can't do this

[sivaraam]

@PavelAplevich I suspect the recent expansion of the Common passwords list (Ref: Phab ticket, Tech News) is the reason behind this issue.

I actually meant ... is not the reason ... My bad.

[sivaraam]

When i try login with my "bad" password, i see "connection error"(mb another, i'm not sure) and that all. And i think this is problem. User doesn't understand what happened. I read my AndStudio logcat and can understand the problem, but user can't do this

The user should be made aware of the bad password issue clearly. But that is a different issue than this one, I suppose.

[PavelAplevich]

No, this is the reason of this issue. If user password going "bad", user can't login with his password, app write "failed login" and that's all (it doesn't clarify the reason). User try again and again, because he know that password is correct. User reinstall app and do the same actions, but app writes "failed login". In this stage i started to think that login system is broken, go into logs and in logs i see problem with my password. User who reported this bug simply didn't understand that problem is about the password, he thought problem with app. I think we can close this issue and just create the right login instructions for our users.

[pdarwin]

I also was unable to login in the app from my mobile phone. I have 2FA enabled, and I seriously doubt it is due to anything like "weak password"

[Steinsplitter]

Same here. I cannot login with 2FA enabled.

[Steinsplitter]

I think we can close this issue and just create the right login instructions for our users.

I don't think so, a number of experienced users with 2FA enabled can't login. The problem is not my pw. So i can confirm was @Darwinius wrote above.

[maskaravivek]

I meant to test that, but I've had 2FA off for a while. Will try to reenable 2FA on my account and re-test soon.

@misaochan were you able to test this?