Page MenuHomePhabricator

Handle 2FA "scratch codes"
Closed, ResolvedPublic

Description

Per @Mhurd the user has a backup 16 digit alphanumeric scratch code that is used as an emergency back-up code for reset. This was not included in original log-in tasks/design.

Specifically we need:

  • An affordance for 2FA users to let them enter a specialized code to reset their access
  • If the user taps it, we need to present a secure text-box where they can enter their scratch code
  • User should get feedback on success or failure
Login 04.png (375×667 px, 32 KB)
Login 06.png (375×667 px, 35 KB)
Login 07 - backup code.png (375×667 px, 34 KB)
Login 08 - failed backup code.png (375×667 px, 36 KB)
2FA, no messaging2FA, with error messageBackup code, no messagingBackup code, error message

Event Timeline

Per @Josve05a would be nice if you could paste as well.

(If we can detect paste even when the 6 boxes are showing it would save a step)

I think for this @ABorbaWMF already has testing criteria.