Page MenuHomePhabricator
Create Task
Maniphest T410484

Link to Special:AccountRecovery when user are asked to provide their 2FA verification code in login process
Open, Needs TriagePublic
Actions

Description

Currently only EmailAuth has link to Special:AccountRecovery so user with 2FA will never be able to use it to recover their account.

Related Objects

Event Timeline

Bugreporter created this task.Nov 19 2025, 8:31 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 19 2025, 8:31 AM
Bugreporter mentioned this in T410485: Split AccountRecovery to a new MediaWiki extension.Nov 19 2025, 8:33 AM
Reedy moved this task from Backlog to User Experience on the MediaWiki-extensions-OATHAuth board.Dec 1 2025, 6:25 PM
Reedy subscribed.Mar 18 2026, 9:56 PM

What is the "2FA verification page"?

Restricted Application added a project: Product Safety and Integrity. · View Herald TranscriptMar 18 2026, 9:56 PM
Aklapper added a comment.Wed, Apr 8, 4:21 PM

@Bugreporter: Could you please answer the last comment? Thanks in advance!

Bugreporter renamed this task from Link to Special:AccountRecovery in 2FA verification page to Link to Special:AccountRecovery when user are asked to provide their 2FA verification code in login process.Wed, Apr 8, 5:16 PM
Reedy added a project: WikimediaMessages.Wed, Apr 8, 5:59 PM

As account recovery is in EmailAuth.. this is really a WMF message customisation request then I guess.

Reedy added a comment.Wed, Apr 8, 6:15 PM

Which probably means we need to work out which flows/messages we want to enhance (presumably all potential 2FA login flows should probably be displaying something about this), and/or where we want to add that (extra) message.

Bugreporter added a comment.Thu, Apr 9, 12:35 AM
In T410484#11801164, @Reedy wrote:

As account recovery is in EmailAuth.. this is really a WMF message customisation request then I guess.

Note T410485: Split AccountRecovery to a new MediaWiki extension propose to split it to a dedicated extension. There there are also opinions to move it to either ContactPage or WikimediaCustomization

Reedy added a comment.Thu, Apr 9, 1:33 AM

Sure, but was tagging based on the current state of things..

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits