• Resolved Ann

    (@patsy444)


    Hi, I didn’t link the page because it’s the Two Factor Authentication page that has my scan code and other details.
    I read everything about how to set up the 2FA and it’s all done except when I enter the authenticator code a box pops up and states:
    Error Activating 2FA
    it states to verify the time on my authenticator device is correct and the servers time is correct. The servers time = 12:20:35 and the authenticator time (mobile phone) is the ‘real’ time of 8:20 am. This is how it shows 12:20:35/8:20am the format is different is this why? and also There is a 4hr difference. I have the time zone properly set on my mobile device and the browser time is correct.
    I need to set this up ASAP, for the past week I got over 50 email alerts that users were locked out from signing in! so I have to go and manually block on the ‘Tools’ page and ‘permanently’ block them on the Blocking page..it won’t stop and I’m worried.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Hey @patsy444,

    If the times are correct and synced can you please try testing for a plugin conflict? Try temporarily switching to a default theme if you’re not already using one and disabling all other plugins then reactivating them one by one to see if the issue persists?

    Please let me know how it goes.

    Thanks,

    Gerroald

    Thread Starter Ann

    (@patsy444)

    Hi Gerroald,

    I had mentioned that the server time is 4hrs ahead from the real-time so it’s not in sync with my device, which has the real-time. I had said how there is a 4hr difference.

    I don’t have a default theme and wouldn’t know how to do what you are asking. I’m not too savvy with that. Unless I’m wrong, but it looks like the time is not in sync.

    It would be nice if there was an alternative to syncing the time like matching phone #’s.

    If I was able to activate the 2FA, would it STOP the many daily emails I get with how users are being locked out from signing in? I’m at over 70 now that I manually block..then ‘permanently’ I never had alerts for that before.

    Thanks!!

    Thread Starter Ann

    (@patsy444)

    Sorry, should I start a new topic conversation regarding the email alerts I have been getting since August 11th? and how I manually block in ‘Tools’ then have to block permanently in ‘blocking’ because there is an expiry date!

    Thank you ??

    Thread Starter Ann

    (@patsy444)

    NO reply? nice support you have, free or not. It’s not often I need support for anything until this came up.

    The issue was the server time and testing my plugins won’t solve that. So I won’t get to use the 2FA. Why not add the phone # option as an alternative to the server time?

    I have read enough of your support topics to see how of course you have to push people to upgrade to premium.

    Some of us don’t have the money! I’m unemployed and my website is starting to get more traffic NO sales yet so I won’t be getting premium anytime soon.

    A friend of mine who has multiple websites and takes care of his clients as well suggested Wordfence to me but didn’t mention how the support is.

    I HAD 13 NEW EMAILS THIS MORNING WITH USER LOCKED OUT FROM SIGNING IN. I never had this before August 11th!
    Bruteforce is taking care of this if I understand it correctly, so I’m going to stop the manual work and hope my website will be OK.

    I probably don’t have all of my settings done correctly, I have checked and can’t understand everything. This is so annoying.

    Hey @patsy444,

    Firstly, my apologies for missing your updates.

    It looks like I misread your original post. If the site/server time is different than your device and browser time your host is going to need to fix this for you.

    As for the attacks, they really are random. Add Two-Factor will add a very strong layer of security. It will prevent the attackers/bots from accessing the wp-admin by logging in from the wp-login.php page. But it won’t prevent them from trying to log in. There’s only so much we can do to prevent an attack, it’s more about making sure they aren’t successful, which it sounds like Wordfence is doing.

    Please reach out to your host regarding the server time issue and let me know how it goes.

    Thanks,

    Gerroald

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘2FA server time & Authenticator device won’t match’ is closed to new replies.