which I am not currently able to generate correctly

Why not?

@Aklapper I don't think that's relevant, but it's probably because my 2FA data was lost when I restored my phone. I have six 16-character codes (five of them being the scratch codes), but I don't know what to do with any of them.

If there's no software solution and I am supposed to contact the WMF directly to be able to log into my account again, then I think it should be clearly stated in at least one of the three help docs (meta/wikitech/mediawikiwiki).

Have you tried logging on directly to wikitech using the scratch codes? Rather than just the toolforge admin console...

Which you'd have to do anyway to remove 2FA from your account to set it up again

You should use a scratch code in place of entering the code generated by your phone.

These steps should get you back to using 2FA normally.

1. Login to Wikitech
   1. Enter an unused scratch code when prompted for 2FA
2. Disable 2FA
   1. Enter an unused scratch code when prompted for 2FA
3. Re-enable 2FA

@JJMC89 @Reedy I've tried that on both wmflabs and wikitech and it doesn't work.

I also don't remember enabling 2FA more than once, which would have had to happen if I now have a set of invalid scratch codes.

In T204682#4594007, @Jc86035 wrote:

I also don't remember enabling 2FA more than once, which would have had to happen if I now have a set of invalid scratch codes.

There's been a couple of cases where people have ended up with invalid scratch codes, but it's usually months later that they realise. Has made it pretty hard to track down and prevent

It looks like 2FA will need to be reset. The easiest option to confirm your identity is to create a file with reference to this task in your home directory on a Toolforge bastion.

@JJMC89 I've created /home/jc86035/T204682.

In T204682#4596861, @Jc86035 wrote:

I've created /home/jc86035/T204682.

Would @bd808 or someone else with access handle the reset?

In T204682#4596861, @Jc86035 wrote:

@JJMC89 I've created /home/jc86035/T204682.

$ mwscript extensions/OATHAuth/maintenance/disableOATHAuthForUser.php --wiki=labswiki Jc86035
OATHAuth disabled for Jc86035.

Not closing as I need to investigate the underlying issue. Since 2FA can't be disabled via toolsadmin the best answer there might be to add instructions on how to go to Wikitech and disable/re-enable rather than consuming a scratch token. If scratch tokens are broken generally somehow on Wikitech though that is something we will want to fix.

@Jc86035 the screen shot you provided is from https://toolsadmin.wikimedia.org. Did you actually try to use your recovery code(s) at https://wikitech.wikimedia.org as well, or only in toolsadmin?

@bd808 I tried both. I also tried removing the spaces in the scratch codes (didn't work) and reusing the other sixteen-character string that I had to generate new six-digit tokens (didn't work).

I've just tested logging into wikitech with a recovery token, worked fine...

I then burned another logging into https://toolsadmin.wikimedia.org...

Both had spaces in...

In T204682#4599837, @bd808 wrote:

If scratch tokens are broken generally somehow on Wikitech though that is something we will want to fix.

Doesn't seem to be the case, or if it was, it no longer is...

In T204682#4599837, @bd808 wrote:

Not closing as I need to investigate the underlying issue. Since 2FA can't be disabled via toolsadmin the best answer there might be to add instructions on how to go to Wikitech and disable/re-enable rather than consuming a scratch token.

I think this may be the only thing at least obviously actionable here?

Still relevant?