2FA bypass

  • Resolved narkissus

    (@narkissus)


    3 years, 6 months ago

    Hi, I’ve just logged in to a website bypassing 2FA using a particular web browser with an old version.

    Giving that this information is delicate, do you have an e-mail where I can send you the browser name and versión?

Viewing 1 replies (of 1 total)
  • Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    Hi,

    Honestly, that’s not possible. 2FA verification doesn’t happen in the browser, and there’s no code that looks or cares what browser you’re using. If you were allowed in without 2FA then it’s not to do with your browser. Could be that 2FA wasn’t set up, that you’re on the Premium version and had marked the device as trusted, or that you have another plugin that intervenes in the login process and cuts out the 2FA check on the back-end (the current release of WP Cerber is believed to do this).

    David

Viewing 1 replies (of 1 total)
  • The topic ‘2FA bypass’ is closed to new replies.