Two-Factor Authentication Bug

[onwingslikeeagles 3]

Hello,

I've recently used the two-factor authentication and noticed what may be a possible issue. At times, I click the setting that states Save this computer for 30 days under the authentication code input and the website still asked me for a code the next time I logged on.

To reproduce this issue, simply use the two-step authentication and click the computer setting on your next login. However, allow the browser to time your session out instead of clicking out of the browser to log out. Once you login again, you'll be prompted for the code. 

I'm not sure if this is a bug or a feature, as the developers may have thought a person doesn't leave their personal computer up and any timed log outs are public PCs. This situation doesn't occur if you close the browser to log out. However, I tend to leave my browser tabs open at time on my personal PC because I'm organizing several items at once. 

My software information is located below. Let me know if you have any further questions to investigate the issue.

- onwingslikeeagles

Software: Windows 10 / Google Chrome browser (latest released version)

[gazumped 11,658]

Hi.  There have been comments about the web client logging users out in an excess of security concern before. Don't think its a bug,  and there are no (AFAIK) work arounds..  sorry. 

 

[onwingslikeeagles 3]

@gazumped

Thanks for replying. I'll take note of this moving forward.

I have another security concern as well, so I'll login in a different thread. 

- onwingslikeeagles

[PinkElephant 8,091]

Better be asked 10 times too often than skipping one time when it would have been necessary...