2FA not working / can’t reset

Hi @alframe, we’re here to help!

I see you’re looking into resetting your Mobile App method 2FA secret, and thank you for linking the thread. The steps there still apply for SolSec v9.1.0 and below.

The new User Security Settings UI is what you’re seeing now (the “Configure” button). To reset your Mobile App secret, use these steps:

• Remove the old key from your Authenticator App
• Click the “Configure” button, and when you get to the “Select Methods step, click the Mobile App arrow icon to see the QR
• Scan it with your authenticator app, enter the generated code to verify, and complete the setup

If you prefer to use the old 2FA settings UI, you can add this constant to your site’s wp-config.php file:
define ( 'SOLID_SECURITY_LEGACY_2FA_UI', true);
Then, you should be able to proceed with the steps from the thread.

Please let me know if this works.

Hi @shandelierrr,

Thank you very much. I first did the old fashion path, then the v9.2+ path and “configure” now actually worked.

2FA up and running again. Thanks!

I did notice that the page Security -> User Security (wp-admin/admin.php?page=itsec-user-security) only quickly shows content and the renders gray.

Are those two issues connected?

Cheers,
Alex

• This reply was modified 10 months, 1 week ago by alFrame.

Hi @alframe, you’re welcome, and I’m glad to hear that 2FA is up and running on your site again!

As for the content issue on the User Security page, I think that’s a different problem. Can you please create a new thread to align with the forum rules?

I’ll go ahead and mark this resolved. If I may, I hope you can share a positive review here if you think we deserve one.

Have a great day!

Hi @shanedelierrr, Thanks again.

I will Investigate that problem further and if I don’t find someone who had this problem, I will post here.

Cheers, Alex

Just to add, I have the same issue across all sites using 2FA. You cannot reset it or change setting when on a user profile.

This is what I get even though its active: https://tinyurl.com/yrs5h9sv

Just to add – When you click on the “Configure” button it takes me back to my WP Dashboard, no setup. This happens on all sites.

You might need to make this more clear for those that have upgraded from iThemes to Solid Security and not aware of this change. I will follow your suggestions above to see if this resolves my issue on one site that causes a serve error when using the plugin.

EDIT: ok I have used the code: define ( ‘SOLID_SECURITY_LEGACY_2FA_UI’, true); to get the old one back and its working again. Not ideal but at least it’s working.

Definitely a broken feature and needs investigating if the button keeps taking me to WP Dashboard when clicked.

Regards

• This reply was modified 10 months, 1 week ago by poppydev.
• This reply was modified 10 months, 1 week ago by poppydev.

What I can add is that I completely removed Solid Security, also made sure the itsec_ tables were dropped and then reinstalled.

When configuring, I encountered an issue, when I wanted to configure the website as my clients site (btw, those choices are missing “regular website for clients”. I tempt to use “Portfolio” which is bunkers, but I digress…).

I had to configure the site as my own site… Then the configurator ran through.

After that, I had to add the “SOLID_SECURITY_LEGACY_2FA_UI” line into the wp-config, because 2FA was broken and I could not reset it.

Not to totally mess up this thread, but because it’s related, let me mention what’s going on with the User Security page. It seems that the plugin “Broken Link Checker” is in conflict with Solid Security. Disable that plugin and the User Security page is back. So, it could be, that this plugin messes with other things in Solid Security and cause other things, like 2FA reset, to break.

@poppydev?I have the exact same problem.

I also had to add the code: define ( ‘SOLID_SECURITY_LEGACY_2FA_UI’, true) to be able to see the configure setting under the user. Otherwise, there are no settings showing even though I’ve setup the 2FA.

If you prefer to use the old 2FA settings UI, you can add this constant to your site’s wp-config.php file: 
define ( 'SOLID_SECURITY_LEGACY_2FA_UI', true);

@shanedelierrr

With Solid Security Basic v9.3.2 I too had to use the above method in order to disable 2FA for my user as the regular method was not working. (WordPress v6.3.4, php 8.2) May 12th 2024