- Blind mode tutorial
lichess.org
Donate

Enabling 2 factor authentication

I've been trying to implement two-factor. authentican. It ask that I use a secret code When I copy and paste enter the code into the authentication code box, I receive an error message stating "please enter in the requested format." There are no instructions on the webpage in terms of a requested format. All I did is copy the secret code and paste ithe authentication box. That's when I get the error message.

I've been trying to implement two-factor. authentican. It ask that I use a secret code When I copy and paste enter the code into the authentication code box, I receive an error message stating "please enter in the requested format." There are no instructions on the webpage in terms of a requested format. All I did is copy the secret code and paste ithe authentication box. That's when I get the error message.

The idea is that even if your password somehow gets known (for example, you used the same email and password elsewhere, which you should never do, and it gets leaked), no one would be able to login here, since they would also need access to the authentication app on your phone.

So... you install an authentication app of your choice on your smartphone (there are a few that can also run on desktop), Lichess suggested a few apps here: https://lichess.org/changelog#other-updates-9
Then you open the app, tap on add new entry there (a plus sign or something similar), scan a QR code on Lichess's 2FA page, i.e. https://lichess.org/account/twofactor

Then the app will generate a 6 digit code every 30 seconds that you type in in Authentication code field to confirm and when you are asked when you login (after you enter the password).

The idea is that even if your password somehow gets known (for example, you used the same email and password elsewhere, which you should never do, and it gets leaked), no one would be able to login here, since they would also need access to the authentication app on your phone. So... you install an authentication app of your choice on your smartphone (there are a few that can also run on desktop), Lichess suggested a few apps here: https://lichess.org/changelog#other-updates-9 Then you open the app, tap on add new entry there (a plus sign or something similar), scan a QR code on Lichess's 2FA page, i.e. https://lichess.org/account/twofactor Then the app will generate a 6 digit code every 30 seconds that you type in in Authentication code field to confirm and when you are asked when you login (after you enter the password).

Just make sure your date and time are synced (correct), because these are using the current time as a source of uniqueness: https://en.wikipedia.org/wiki/Time-based_one-time_password

Just make sure your date and time are synced (correct), because these are using the current time as a source of uniqueness: https://en.wikipedia.org/wiki/Time-based_one-time_password

@defense57 said in #1:

All I did is copy the secret code and paste it in the authentication box. That's when I get the error message.
It's only six digits. What happens when you type the code in manually?

@defense57 said in #1: >All I did is copy the secret code and paste it in the authentication box. That's when I get the error message. It's only six digits. What happens when you type the code in manually?

I figured it out. There is no way to do it as I'm using the Windows app. Awful they keep messaging me to do something that I can't do. Who plays lichess on their phone anyway?

I figured it out. There is no way to do it as I'm using the Windows app. Awful they keep messaging me to do something that I can't do. Who plays lichess on their phone anyway?

Here I play on Android or Linux. There is no Windows in my House.

Here I play on Android or Linux. There is no Windows in my House.

This topic has been archived and can no longer be replied to.