[GH-ISSUE #461] TFA is not reliable #12271

Closed
opened 2026-05-13 17:27:10 -05:00 by GiteaMirror · 7 comments
Owner

Originally created by @kylepyke on GitHub (Apr 5, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/461

Two factor authentication does not always work. I enter my credentials, then I'm taken to the TFA screen. I enter the TFA token according to my linked authenticator. The code does not work, with the error "The two-factor code you entered is incorrect", even when it is correct.

Originally created by @kylepyke on GitHub (Apr 5, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/461 Two factor authentication does not always work. I enter my credentials, then I'm taken to the TFA screen. I enter the TFA token according to my linked authenticator. The code does not work, with the error "The two-factor code you entered is incorrect", even when it is correct.
GiteaMirror added the stale label 2026-05-13 17:27:10 -05:00
Author
Owner

@kylepyke commented on GitHub (Apr 5, 2025):

Closing and reopening the authenticator app seems to have fixed this.

<!-- gh-comment-id:2779968288 --> @kylepyke commented on GitHub (Apr 5, 2025): Closing and reopening the authenticator app seems to have fixed this.
Author
Owner

@maxwassiljew commented on GitHub (May 23, 2025):

I’m still seeing this exact problem: after entering correct credentials I’m prompted for 2FA, but the valid TOTP code from my authenticator is always rejected with: The two-factor code you entered is incorrect

tested with: Vaultwarden and OTP Auth

@kylepyke What authenticator app do you use?

<!-- gh-comment-id:2903671004 --> @maxwassiljew commented on GitHub (May 23, 2025): I’m still seeing this exact problem: after entering correct credentials I’m prompted for 2FA, but the valid TOTP code from my authenticator is always rejected with: The two-factor code you entered is incorrect tested with: Vaultwarden and OTP Auth @kylepyke What authenticator app do you use?
Author
Owner

@kylepyke commented on GitHub (May 23, 2025):

I use DUO and still get this error from time to time. The fix seems to be: 1. Close the auth app; 2. Reload the Pangolin login page; 3. Reopen the auth app.

This does still seem to be a bug…

<!-- gh-comment-id:2904552865 --> @kylepyke commented on GitHub (May 23, 2025): I use DUO and still get this error from time to time. The fix seems to be: 1. Close the auth app; 2. Reload the Pangolin login page; 3. Reopen the auth app. This does still seem to be a bug…
Author
Owner

@maxwassiljew commented on GitHub (May 23, 2025):

Thank you, I will recheck with DUO. Right now I'm trying this solution: #106

<!-- gh-comment-id:2904560979 --> @maxwassiljew commented on GitHub (May 23, 2025): Thank you, I will recheck with DUO. Right now I'm trying this solution: #106
Author
Owner

@DarrenYOW commented on GitHub (May 23, 2025):

I've been intermittently having the same issue using Aegis. A browser refresh usually "fixed" it. Turns out I had the exact same NTP problem described in #106. UPDATE: Issue has not recurred since applying the NTP fix.

<!-- gh-comment-id:2904814684 --> @DarrenYOW commented on GitHub (May 23, 2025): I've been intermittently having the same issue using Aegis. A browser refresh usually "fixed" it. Turns out I had the exact same NTP problem described in #106. UPDATE: Issue has not recurred since applying the NTP fix.
Author
Owner

@github-actions[bot] commented on GitHub (Jun 18, 2025):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

<!-- gh-comment-id:2982203203 --> @github-actions[bot] commented on GitHub (Jun 18, 2025): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
Author
Owner

@oschwartz10612 commented on GitHub (Jun 18, 2025):

Yeah everyone having MFA issues please make sure your VPS always has the right time and the NTP is working. That almost always fixes this. If not please open a new issue!

<!-- gh-comment-id:2984284604 --> @oschwartz10612 commented on GitHub (Jun 18, 2025): Yeah everyone having MFA issues please make sure your VPS always has the right time and the NTP is working. That almost always fixes this. If not please open a new issue!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#12271