Two factor authentication does not always work. I enter my credentials, then I'm taken to the TFA screen. I enter the TFA token according to my linked authenticator. The code does not work, with the error "The two-factor code you entered is incorrect", even when it is correct.
Originally created by @kylepyke on GitHub (Apr 5, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/461
Two factor authentication does not always work. I enter my credentials, then I'm taken to the TFA screen. I enter the TFA token according to my linked authenticator. The code does not work, with the error "The two-factor code you entered is incorrect", even when it is correct.
I’m still seeing this exact problem: after entering correct credentials I’m prompted for 2FA, but the valid TOTP code from my authenticator is always rejected with: The two-factor code you entered is incorrect
tested with: Vaultwarden and OTP Auth
@kylepyke What authenticator app do you use?
<!-- gh-comment-id:2903671004 -->
@maxwassiljew commented on GitHub (May 23, 2025):
I’m still seeing this exact problem: after entering correct credentials I’m prompted for 2FA, but the valid TOTP code from my authenticator is always rejected with: The two-factor code you entered is incorrect
tested with: Vaultwarden and OTP Auth
@kylepyke What authenticator app do you use?
I use DUO and still get this error from time to time. The fix seems to be: 1. Close the auth app; 2. Reload the Pangolin login page; 3. Reopen the auth app.
This does still seem to be a bug…
<!-- gh-comment-id:2904552865 -->
@kylepyke commented on GitHub (May 23, 2025):
I use DUO and still get this error from time to time. The fix seems to be: 1. Close the auth app; 2. Reload the Pangolin login page; 3. Reopen the auth app.
This does still seem to be a bug…
Thank you, I will recheck with DUO. Right now I'm trying this solution: #106
<!-- gh-comment-id:2904560979 -->
@maxwassiljew commented on GitHub (May 23, 2025):
Thank you, I will recheck with DUO. Right now I'm trying this solution: #106
I've been intermittently having the same issue using Aegis. A browser refresh usually "fixed" it. Turns out I had the exact same NTP problem described in #106. UPDATE: Issue has not recurred since applying the NTP fix.
<!-- gh-comment-id:2904814684 -->
@DarrenYOW commented on GitHub (May 23, 2025):
I've been intermittently having the same issue using Aegis. A browser refresh usually "fixed" it. Turns out I had the exact same NTP problem described in #106. UPDATE: Issue has not recurred since applying the NTP fix.
@github-actions[bot] commented on GitHub (Jun 18, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
<!-- gh-comment-id:2982203203 -->
@github-actions[bot] commented on GitHub (Jun 18, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
@oschwartz10612 commented on GitHub (Jun 18, 2025):
Yeah everyone having MFA issues please make sure your VPS always has the right time and the NTP is working. That almost always fixes this. If not please open a new issue!
<!-- gh-comment-id:2984284604 -->
@oschwartz10612 commented on GitHub (Jun 18, 2025):
Yeah everyone having MFA issues please make sure your VPS always has the right time and the NTP is working. That almost always fixes this. If not please open a new issue!
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @kylepyke on GitHub (Apr 5, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/461
Two factor authentication does not always work. I enter my credentials, then I'm taken to the TFA screen. I enter the TFA token according to my linked authenticator. The code does not work, with the error "The two-factor code you entered is incorrect", even when it is correct.
@kylepyke commented on GitHub (Apr 5, 2025):
Closing and reopening the authenticator app seems to have fixed this.
@maxwassiljew commented on GitHub (May 23, 2025):
I’m still seeing this exact problem: after entering correct credentials I’m prompted for 2FA, but the valid TOTP code from my authenticator is always rejected with: The two-factor code you entered is incorrect
tested with: Vaultwarden and OTP Auth
@kylepyke What authenticator app do you use?
@kylepyke commented on GitHub (May 23, 2025):
I use DUO and still get this error from time to time. The fix seems to be: 1. Close the auth app; 2. Reload the Pangolin login page; 3. Reopen the auth app.
This does still seem to be a bug…
@maxwassiljew commented on GitHub (May 23, 2025):
Thank you, I will recheck with DUO. Right now I'm trying this solution: #106
@DarrenYOW commented on GitHub (May 23, 2025):
I've been intermittently having the same issue using Aegis. A browser refresh usually "fixed" it. Turns out I had the exact same NTP problem described in #106. UPDATE: Issue has not recurred since applying the NTP fix.
@github-actions[bot] commented on GitHub (Jun 18, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
@oschwartz10612 commented on GitHub (Jun 18, 2025):
Yeah everyone having MFA issues please make sure your VPS always has the right time and the NTP is working. That almost always fixes this. If not please open a new issue!