signon
signon copied to clipboard
2 step verification failure should tell the user to check their phone time
TOTP is based on the time of the device that the TOTP is calculated on. When a user fails 2SV, we should ask them to check the time of their phone or whatever they're using.
We had a plan for this, which was to show further advice on the second failed attempt (ie discounting a typo).
It was never implemented because Core stopped working on 2SV.
From Joseph:
It's already part of 2nd Line's macros and most users now have [2SV] Enabled, so I think it's redundant at this point
Closing