Help talk:Extension:EmailAuth

missing topic: What should I do if I get a code, every time I log in?

Some users get an e-mail verification with every login. What shall they do? MTheiler (talk) 18:48, 3 August 2025 (UTC)

@MTheiler you should allow Wikimedia cookies (at least the one called loginnotify_prevlogins), that way your device get's recognised and you won't be asked to enter a verification code again. See e.g. meta:Tech#Obligatory security rules that users cannot decide for a more detailed answer. Johannnes89 (talk) 19:56, 3 August 2025 (UTC)

@MTheiler The user's answer does not work. No matter what cookie I allow, it just keeps asking for verification. Please, let us disable it! Tün (talk) 19:34, 16 January 2026 (UTC)

Did you make sure that the cookie remains? Perhaps either your browser settings or some other applications (e.g. antivirus software) are configured to frequently delete your cookies?

Activating m:2FA is another way of avoiding EmailAuth, because that's even more secure. Johannnes89 (talk) 20:09, 17 January 2026 (UTC)

Missing two-factor code

Yesterday I tried login on my smartphone, but didn't get a code on my email-address. I repeated twice. Today when I checked my spam-directory I found the missed three mails. I suggest to place an according notice to the popup-msg at the login-procedure and to the help-text overleaf.@Willibaldus.de

Willibaldus (talk) 13:00, 5 August 2025 (UTC)

Help needed with getting codes

This new extension is causing major problems for m:Wiki Education Foundation. We seem to have two related issues:

1. Many of our returning instructors have been flagged with this new system (likely because they haven't logged in for months). Some of them have moved universities, and no longer have access to their email addresses they used to create the account. Some of them are just not getting the confirmation email. They have been emailing ca@wikimedia.org per the instructions but not getting any help. We have received 6 reports of this problem in the last 24 hours, so this is not just a one-time thing. Is there a way we can provide a list of usernames that can be exempted from this requirement?

2. Similar to #1, many of our new instructors who are just creating accounts are also not receiving passwords. I'm less sure this is related to this feature, but it has been dramatically higher since it was released. This is mostly when a new instructor cannot create an account because their university's IP is blocked from account creation; instead, they request an account, but they never receive the email with the temporary password because it is blocked by their university's spam filtering. We expect this will be a HUGE problem for us in another month, when we have thousands of students who will be trying to create accounts and will not receive these messages with their new temporary passwords. Is there any way you can work to get the emails coming with these temporary passwords or codes whitelisted so they will get through to people?

Pinging @Tgr (WMF): since you created the page, but open to help from anyone here! LiAnna (Wiki Ed) (talk) 17:45, 5 August 2025 (UTC)

@LiAnna (Wiki Ed) we are looking into email sending issues in T383047, might or might not be related. Feel free to create a private task or paste with email addresses and we can look into what happened.

Wrt spam filtering, I think that would have to be fixed by the university IT team. Is there anything specific we should be doing? As far as I know the emails have valid SPF and DMARC records. Tgr (WMF) (talk) 19:15, 5 August 2025 (UTC)

@Tgr (WMF): Thanks so much for the reply. I sent you an email that has ten usernames and what should be the associated email address who have reported to us that they can't log in because they're not getting the code.

I'm not a tech person (maybe my colleague Sage (Wiki Ed) can help when he's back from vacation on Monday), so I'm not sure about the spam technical side, but this is definitely not something we've experienced at the volume we're experiencing it now, so it feels like something changed recently. LiAnna (Wiki Ed) (talk) 21:34, 5 August 2025 (UTC)

For the record, this is being followed up at T401301 (not public because it includes examples of specific email addresses). The other task does not seem related. --Tgr (WMF) (talk) 20:23, 15 August 2025 (UTC)

Після входу у свій обліковий запис, чи можу я вимкнути подвійну автентифікацію?

З деякими труднощами я увійшов у свій обліковий запис. На жаль, функція поки що незовсім стабільна (великі затримки між вводом паролю і отриманням листа з кодом, повторна спроба ввести пароль робить недійсним попередній лист з кодом (навіть якщо він ще тільки надсилається і його ще не було отримано!), інколи з невідомих причин виникає повідомлення про закінчення сесії — я зміг увійти не з першої спроби), тому не здивуюсь, якщо при наступній спробі входу я не зможу увійти взагалі. Чи можу я вимкнути подвійну автентифікацію в налаштуваннях свого профілю (принаймні, до тих часів, коли ця функція буде повністю стабільною)? P.Y.Python (talk) 20:36, 8 October 2025 (UTC)

Yes you can, and this page might help: m:Special:MyLanguage/Help:Two-factor authentication#Disabling two-factor authentication. Quiddity (WMF) (talk) 00:07, 15 October 2025 (UTC)

There is no way to disable email verification codes, but they are only used if you do not have "normal" two-factor authentication enabled and you haven't logged in from your current device recently (or you have disabled / limited cookies) and you haven't used your current IP address recently. Tgr (WMF) (talk) 13:28, 21 October 2025 (UTC)

Even when I enter the verification code, it says it’s invalid.

I entered the verification code number written in the email I received, but it shows as an invalid code and I can’t log in. Copying and pasting the code didn’t work either. Afaz (talk) 02:56, 1 November 2025 (UTC)

Bad coding

I understand the idea behind that Verfication, but the practical implementation in code is clumsy. A new code seems to be send every time a login is tried - but there is no version number shown in the formular and the code. So depending on the reaction and transfer time of the emails it is likely that an old - "wrong" - code is submitted again and again. That seems to have happened to several users, looking at the messages above.

Solution: Accept "older" (we are talking about seconds or minutes) codes for verfication as well as the latest (like now).

--Bernd.Brincken (talk) 19:57, 17 December 2025 (UTC)

@Bernd.Brincken yeah we'll have to do something about old codes. There's some related discussion at phab:T395353. Tgr (WMF) (talk) 21:59, 25 December 2025 (UTC)

AWB Log In

I've been trying to log in to AWB now, but it will say "LOG IN Failed", i'll get an email with a code but there's no window that opens up for the code to be entered? This has only happened from today, as before this I was easily able to log in--Majash2020 (talk) 03:09, 23 January 2026 (UTC)

VicunaUploader

Как мне зайти в приложение VicunaUploader? Зачем мне включили эту функции? Мне она не нужна! Mike1979 Russia (talk) 17:40, 27 January 2026 (UTC)