TFA detected when I never activated it

[caterfree10]

So I'm trying to log into my tumblr account because I just learned that my blog at my public desktop url is not showing the same posts that my dashboard or mobile app do and I want to make sure it saves all the things. However, when I try to log in, it asks for Two Factor Authorization (TFA) despite my never having activated it on my tumblr account. What is going on and how can I fix this so I can get my blogs backed up?

[stillwaterspony]

Heyo, I just ran into the same issue. I think it might have to do with tumblr randomly changing its login process whenever you try and login?

Long story short, using this release let me manually login and solved the issue: https://github.com/johanneszab/TumblThree/releases/tag/v1.0.8.51

[Anonymous-Mischief]

Hiya! I had this problem last night and couldn't get the program to log in without getting the TFA message either. Did a little head scratching and realized that the "User Agent" in the application's connection tab did not match my browser version.

The default value for the "User agent" for me was: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36

I just kept the bit for my browser and updated the version number after it to match what version my browser says it is.

Try updating your browser or check out what your browser version is and updating that version number in the "User agent" box in the application's Settings->Connection tab.

Another thing I did was set a TFA, logged out, waited a while and then deactivated it. However I doubt that would've done the trick though.

Worked for me ;) Good Luck!

[johanneszab]

Relates to #259.

[johanneszab]

IMHO, this will happen if Tumblr asks you for a Google catpcha during the login process -- or less likely, if you've wrongly entered your credentials. Note, that you'll need to enter the email address used to register at Tumblr, and your password. Not your username.

I think what should circumvent this issue (the captcha) is to re-connect to your ISP (via your router/etc). Tumblr will ask you to fill out the captcha after two failed login tries. Maybe you've got unlucky and a spammer IP from your ISP. After getting a new, "fresh" IP from your ISP, I'd retry to login in TumblThree.

If all this doesn't help, you can also use the previous release that still uses the Internet Explorer for logging in. However, it will not contain all the changes made after this release (see the release page for more).

[caterfree10]

Well apparently, whatever issue I was having last night seems to have cleared up because I logged in just fine this evening. At any rate, here's hoping the responses in this thread help others who encounter the same problem I did. o7

[FullMetalFist]

I was asked to enter the TFA when the blog would redirect (happyblog.tumblr.com -> www.tumblr.com/dashboard/blog/happyblog). Then it wouldn't download

[johanneszab]

And? You left out the important parts

• You are now authenticated because you followed the instructions given in TumblThree? -> then the blog would download
• If not, why?
• You followed the instructions in this post?

[FullMetalFist]

Apologies!
I had successfully downloaded 3 other blogs, so authentication isn't an issue. Also tried earlier versions which have been posted above & there would be no download if the blog redirects

[johanneszab]

I'm honestly still not getting it:

• So, you are authenticated? In the Settings -> Connection at the bottom, there is written "Logged in as email@domain.tld"? Because if that's the case, those hidden blogs (with redirection) should download. And then I'm not getting why you are posting in this two factor authentication issue thread.
• The 3 other blogs were also hidden blogs (with redirection)? For sure?
• What exactly means "no download"? It crawls, but doesn't download anything? -> Check the settings of that blog in the Details.

If you're sure that only that specific blog doesn't work, you should post it/send me per email, otherwise I can probably not help you.

[firehawk12]

A bit off topic but Is TFA supported? I tried entering my generated code and it wouldn't log in.

[johanneszab]

@firehawk12:
Yes, it's possible. However, I guess it doesn't work as well if you are shown a Google catpcha during the 2FA login. As I've already explained a bit above, this is the reason of this whole issue. Someone has to implement a view for this in which you can solve the captcha and send back the correct data.

[johanneszab]

You can try to use my Cookies.json file for download hidden blogs and Tumblr likes. Maybe it will work for some time (depending on the amount of users).

This file needs to be copied to %LOCALAPPDATA%\TumblThree\Settings\ while TumblThree is closed! Thus, for a user named xyz, the correct path is: C:\Users\xyz\AppData\Local\TumblThree\Settings.