Subject: Account Recovery Request - Invalid TOTP Code despite Google Authenticator Access

[Yongle-Fu]

PyPI Username

Yongle-Fu

Reason for request

Dear PyPI Support,

I am writing to request assistance with my PyPI account login.

I have my correct username, password, and I can access my Google Authenticator app on my new phone. However, when I enter the 2FA code generated by Google Authenticator, I always receive an “Invalid TOTP code” error.

I also have an old API token (pypi-AgEIcHlwaS5vcmcCJDgzZjBiY2Y2LTI2OGQtNGVhYy1hNTA3LTcwYmQ5ZDFmYWQ2NQACKlszLCI3OWJhZ...), which still works for uploading packages, but I no longer have the original recovery codes.

I suspect that the TOTP secret may have become desynchronized when I changed phones. Could you please help me reset or disable the two-factor authentication (2FA) on my account so that I can log in successfully again?

Thank you very much for your time and support.

Recovery Codes

• I never generated or have lost access to the recovery codes for my account

Code of Conduct

• I agree to follow the PSF Code of Conduct

Acknowledgement

• I understand that it may take a significant amount of time to process my account recovery request.

[Thespi-Brain]

Hi @Yongle-Fu,

In order to start the account recovery process to reset your 2FA and recovery codes, your account needs to have a valid/active link to a public repo of your project. Unfortunately, when I took a look into your account, there was no such active link.

What I can offer as a workaround is for you to send an email to support@pypi.org confirming your intent to reset your 2FA and recovery codes with a link to this issue (#6850). There will be a 7 day wait period from that email as part of our verification/security policy, after which we will go ahead and reset your account and go from there. Thanks!

[Yongle-Fu]

OK, Thank you very much

[Thespi-Brain]

Hi @Yongle-Fu,

Thanks for completing the verification process. The verification was successful! Your 2FA has been reset and a password reset has been issued. You should be able to regain access to your account after completing the password reset. Let us know if you have any more issues. Thanks.