Password reset & 2FA

gecko · 17 Feb 2017, 05:35 AM

I was just wondering how password reset and 2FA play together.

Does a password reset have any effect on 2FA or are they entirely unconnected? If the latter, I'd assume that after resetting the password the OTP still needs to be supplied?

This would be both boon and bane. On the one hand, being able to reset someone's password would not suffice to break into an account while on the other hand, if I locked myself out of my account because of lost OTPs, I could not easily regain access.

Best regards,
gecko

kservik · 17 Feb 2017, 10:37 PM

You can reset the account password like normal, but it does not affect 2FA.

Kim

17 Feb 2017, 05:35 AM	#1
gecko Senior Member Join Date: Feb 2010 Posts: 107	Password reset & 2FA I was just wondering how password reset and 2FA play together. Does a password reset have any effect on 2FA or are they entirely unconnected? If the latter, I'd assume that after resetting the password the OTP still needs to be supplied? This would be both boon and bane. On the one hand, being able to reset someone's password would not suffice to break into an account while on the other hand, if I locked myself out of my account because of lost OTPs, I could not easily regain access. Best regards, gecko

17 Feb 2017, 10:37 PM	#2
kservik Cornerstone of the Community Join Date: Sep 2005 Location: Oslo, Norway Posts: 555 Representative of: Runbox.com	You can reset the account password like normal, but it does not affect 2FA. Kim