Unable to provision TOTP

[patel999jay]

Hey -- i seem to have the same issue... I've tested with both authy, google authenticator + Microsoft authenticator

This is my user account https://pypi.org/user/avi_vajpeyi/

Any suggestions?

(I tried the 'Time sync' option for the google authenticator app, i got a message stating "... in sync with Google servers")

i have the same issue, could not do it with authy, google authenticator and/or Microsoft authenticator.

Originally posted by @patel999jay in #7385 (comment)

[miketheman]

@patel999jay I've double-checked the behavior for TOTP enrollment, and it still works as expected.
Are you certain you're not adding any other characters to the input?
Input is also time-sensitive.

[patel999jay]

@miketheman : I am certain I am not adding any other character to the input and also input the code in timely fashion.

To Reproduce

• Create New Account
• Try To Enable 2FA
• Every time getting this : "Invalid TOTP code. Try again?"

[miketheman]

@patel999jay I am unable to reproduce the issue. I've also just confirmed the behavior is working on both pypi.org and test.pypi.org .

And you have confirmed that your app has been time-synced?

[patel999jay]

@miketheman : yes it is sync and i tried using both android and apple device, not working on any of them.

[avivajpeyi]

Hey -- I'm having the same issue, tested with authy, Microsoft authenticator and the Google authenticator apps. :(

[di]

For folks having issues adding TOTP, can you visit https://time.is/ on your mobile device (the same one with your authenticator app) and confirm that it says "Your time is exact!"?

[patel999jay]

Take a look at this:

[di]

Thanks @patel999jay. Can you confirm that in Google Authenticator, you're using the code from an entry that says PyPI: <username>?

[patel999jay]

@di : yes, correct i am using this from that entry.

[di]

@patel999jay Can you try deleting all "PyPI" entries from your authenticator app, hard-reloading the page with the QR code, scanning it in via your app and using the new code it provides?

[di]

@patel999jay Is this the PyPI account in question? https://pypi.org/user/jpatel1993/. This is showing that you already have 2FA enabled on this account. Are you trying to add a new 2FA device? Do you see any TOTP devices listed at https://pypi.org/manage/account/?

[patel999jay]

@di : right, i just tried adding my account via my Ubuntu machine with authy app and it would let me do it. I still can not add that to my phone, i mean with google authenticator + Microsoft authenticator.

[di]

You can only have one TOTP device at a time. Are you trying to replace the Authy device with a mobile device?

[patel999jay]

yes right.