Migrating the 2FA from SHA256 to SHA1 (Used from early Alpha testing)

General Discussion Account
1

Hello,

since a few days i can’t login into my (normal) account, because the 2fa always fails with the error “The code you entered is incorrect. Please try again.”

I triple-checked the token, account username/password, it’s always the same error.

I also tried to:

  1. use a different browser (tried Chrome and Edge)
  2. deleted cookies and cache
  3. deactivated plugins which may block something
  4. deactivate firewall (idk how that should change anything, but the support told me to test it)

The support told me to post here, if his methods shouldn’t work, so here I am :smiley:

Does anybody have a clue?

PS: I’m 100% sure that I’m using the correct token, didn’t change account nor my token app in any way since activating it for that account.

2

Since I know that you had access to the 2FA earlier, I would like to know if you remember when you’ve activated it?

When was the last time it was working?

Is it just on the myTS site or also in the Client?

2 Likes
3

Client aswell, it was quite a time ago, lost track of it because i was busy at work. I think like 4/5 months ago, i believe it was after i needed to reset my pc and had to reinstall the client. Not sure if it could have been an update of the client :sweat_smile:

Edit: activated it as soon as we (you know what i mean) were able to

4

The full release was in October so, you probably still have the old algorithm in your Auth App… I’ll try to get a method to convert it to the new one.

2 Likes
5

Ah ■■■■, my bad …:pleading_face: i probably overlocked it in the hype. Let me know if i can help in any way!

6

I was able to recover one of my test accounts, however I was not the one that solve it so I need to wait for a response / he responds directly here :sweat_smile:

3 Likes
7

No worries! You are the goat ngl

1 Like
8

:waving_hand:
So you your authenticator needs to generate codes with the SHA1 algo, 6 digits and a period of 30 seconds. This changed some time ago during the alpha.

You need to

  1. Export the code from your authenticator app to get to the raw data. This is usually the same QR code as you used for the initial setup.
  2. Decode this QR code to get the raw data. You can use e.g. CyberChef (simply past you QR code there)
    This will give you something that looks like this:
    otpauth://totp/<someName>:<youraccount@email>?secret=<someRandomCharacters>&algorithm=SHA256&digits=6&period=30
  3. Change the part after the? so it looks like this:
    otpauth://totp/<someName>:<youraccount@email>?secret=<someRandomCharacters>&algorithm=SHA1&digits=6&period=30
  4. Convert that back to a QR code (e.g. again with CyberChef)
  5. Import that back into your authenticator.
4 Likes
9

Worked! Love you guys! Great solution <3

3 Likes