Warn users before they generate a new recovery code
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Catrope
	Oct 2 2025, 11:26 PM

Project Tags

Referenced Files

None

Subscribers

AAlhazwani-WMF

Aklapper

Catrope

Description

When a user asks to generate a new recovery code, they should see a warning first, and they should have to confirm that they have saved it.

In T150601#11085087, @AAlhazwani-WMF wrote:

@Catrope i've realized the the full flow was missing in figma, so i've created a new section under the 'user stories' page, here's the direct link https://www.figma.com/design/ll2DMOlp80iy7wYCk44dxT/Multiple-Authenticators?node-id=4305-7374&t=NrkuFI0ZQaicGjZy-1 to the section in question.

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	Warn users before creating new recovery codes	Reedy	mediawiki/extensions/OATHAuth	REL1_45	+15 -3
	Warn users before creating new recovery codes	Mstyles	mediawiki/extensions/OATHAuth	master	+15 -3

Customize query in gerrit

Related Objects

Mentioned In: T406253: Add JS-based Codex Dialogs for rename and delete buttons on Special:AccountSecurity
Mentioned Here: T150601: Add option to generate new set of recovery codes

Event Timeline

Catrope created this task.Oct 2 2025, 11:26 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 2 2025, 11:26 PM

Reedy added a project: MediaWiki-extensions-OATHAuth.Oct 2 2025, 11:27 PM

Catrope mentioned this in T406253: Add JS-based Codex Dialogs for rename and delete buttons on Special:AccountSecurity.Oct 2 2025, 11:47 PM

Catrope moved this task from Inbox to UX cleanup on the FY2025-26 WE 4.6 - Account Security (WE 4.6.4 - 2FA improvements and passkey support) board.

Reedy moved this task from Backlog to Features/Improvements on the MediaWiki-extensions-OATHAuth board.Oct 3 2025, 11:31 AM

Reedy moved this task from Features/Improvements to User Experience on the MediaWiki-extensions-OATHAuth board.Oct 11 2025, 3:56 PM

Change #1199517 had a related patch set uploaded (by Mstyles; author: Mstyles):

[mediawiki/extensions/OATHAuth@master] Warn users before creating new recovery codes

https://gerrit.wikimedia.org/r/1199517

gerritbot added a project: Patch-For-Review.Oct 28 2025, 10:54 PM

Catrope closed this task as Resolved.Oct 29 2025, 12:17 AM

Catrope claimed this task.

Change #1199517 merged by jenkins-bot:

[mediawiki/extensions/OATHAuth@master] Warn users before creating new recovery codes

https://gerrit.wikimedia.org/r/1199517

Maintenance_bot removed a project: Patch-For-Review.Oct 29 2025, 12:31 AM

ReleaseTaggerBot added a project: MW-1.46-notes (1.46.0-wmf.1; 2025-11-05).Oct 29 2025, 1:00 AM

Change #1199719 had a related patch set uploaded (by Reedy; author: Mstyles):

[mediawiki/extensions/OATHAuth@REL1_45] Warn users before creating new recovery codes

https://gerrit.wikimedia.org/r/1199719

gerritbot added a project: Patch-For-Review.Oct 29 2025, 8:38 AM

Change #1199719 merged by jenkins-bot: