Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

twitter.com

Post reply on HN
Print view View original

61–70 of 74 posts

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#61

Post by jcglz »

organizedwalrus wrote: post #58
jcglz wrote: post #57

Earlier quoted context omitted.

Please explain to me how deactivating the "normal" 2fa is a good idea, they are so lost. And idk man, I simply clicked on an article on Google and it loaded right up lol. Looks like they are reverting, try refreshing.

They are indeed very, very lost. I don't understand it either. Ideally, you want multiple methods of authentication! Sigh. If I do get back in I might just try re-adding it lol. Thank you for your insight.

Looks like it's fully reverted now, try again.

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#63

Post by k_sze »

dan_pixelflow wrote: post #6

Same here - simply cannot fix it, and it's somewhat annoying that it talks about Yubikeys when I'm only using on-device security keys instead. Must be very confusing for many others!

I was very confused, too. I mean, I do have a YubiKey but Twitter/X has never (or for a very very very long time not) asked me to use my YubiKey to authenticate. As far as I could remember, I only need to use OTP from Authy as 2FA to login. So the whole thing smelled really fishy.

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#64

Post by terrywang »

Prompted a couple of times only on the mobile device. I have a YibiKey 4 so it's inconvenient to do it with a USB-C to USB-A adapter. Ignored it for a while and eventually I wasn't able to use X without "re-enroll".

So I did it on a laptop. The process seemed legit, the entire flow was weird and not intuitive, I had to stop and read twice before proceeding (e.g. "Where to store passkey", disable all other MFA ans only use Security Key, a backup recovery code was given...). After going through all that, find myself locked out of X because of the infinite re-enroll loop, OMG.

Contacted support, let's see how long it takes. After this, I don't think I'll continue to use Security Key with X...

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#66

Post by terrywang »

organizedwalrus wrote: post #53
dansoto wrote: post #32

"Get a YubiKey," they said. "It'll be fun!," they said. Grrrrr.....stuck like Chuck.

What gets me is that I re-enrolled weeks ago and still got stuck in this loop. Sigh.

Uh-oh, looks like the only way out is to unenroll security key completely (if it was enrolled when DNS rebrand was not done).

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#67

Post by denysvitali »

Oh wow, here's the thread I was looking for.

I'm stuck in the same loop and effectively locked out of my account. I wanted to complain about this on X and of course I can't do that. I also wanted to see if I was the only one affected or it was more widespread, but of course being logged out it's impossible.

Thankfully there's still HN :)

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#68

Post by ClintGA »

denysvitali wrote: post #67

Oh wow, here's the thread I was looking for. I'm stuck in the same loop and effectively locked out of my account. I wanted to complain about this on X and of course I can't do that. I also wanted to see if I was the only one affected or it was more widespread, but of course being logged out it's impossible. Thankfully there's still HN :)

I'm still locked out too.. No clue what to do. I just did a support ticket.

Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)

#69

Post by sebst »

Same for me. I've seen many people being back to normal though.

I re-enrolled on mobile using a Yubikey NFC with the iOS app back in October when prompted.

Force logged-out today from a session on Desktop Chrome. Stuck in the loop. Force logged-out on iOS app.

Burnt recovery code in further attempts.

Tried again when support asked me to by email. Got a "suspicious login attempt prevented" message. That's 2 hours ago. Silence from support since.

Tried again, back to the loop (the "suspicious login attempt" message is gone), but I'm still not able to re-enroll the key.

Anyone can describe their setup that managed to login again?

Post reply on HN