How could 2FA be disabled if you need 2FA in order to login to disable it and my free OTP+ is biometric protected?
Locking as this question violates rule 5.
The server owner has complete control of your account.
They could very easily take control completely if they want.
ITT OP learns that 2FA is just a token stored on a server, and that server is in control by other people
This is what I thought. I keep telling people they don’t exclusively own their passwords / security tokens once they give it to a site. Salted hashes to obscure the pw don’t even matter since the admin could also bypass that. Tanks for the validation.
And you better pray the website owner (websites in general, not Lemmy specifically) at least hashes your password.
This was unfortunately an error on our end.
Please bear with us while we work on resolving this situation.
2FA has been restored for all LW users that had it enabled before and didn’t reactivate it on their own since.
There will be an announcement posted later on explaining what happened.
edit: announcement is out: https://lemmy.world/post/18503967
Ask your instance administrator.
