From 7dade42efcf435e95d38e7659e2f1d7c1e8985dc Mon Sep 17 00:00:00 2001 From: kanoi Date: Wed, 12 Aug 2015 12:11:02 +1000 Subject: [PATCH] php - add an explaination of the 30s on the 2fa page --- pool/page_2fa.php | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pool/page_2fa.php b/pool/page_2fa.php index 7648bd12..4ec7330a 100644 --- a/pool/page_2fa.php +++ b/pool/page_2fa.php @@ -105,6 +105,14 @@ function set_2fa($data, $user, $tfa, $ans, $err) $pg .= 'that you type into the "*2nd Authentication:" field on any page that has it.

'; $pg .= 'IMPORTANT: the TOTP algorithm uses the time on your device,
'; $pg .= "so it is important that your device's clock is accurate within a few seconds.

"; + $pg .= 'IMPORTANT: you enter the value from your App at the time you submit data.
'; + $pg .= "The value is valid only once for a maximum of 30 seconds.
"; + $pg .= "In both the Apps it has a 'dial' that shows the 30 seconds running out.
"; + $pg .= "If you are close to running out, you can wait for the 30 seconds to run out
"; + $pg .= "and then enter the new value it will come up with.
"; + $pg .= "The pool checks your value using the time at the pool when you submit the data,
"; + $pg .= "it doesn't matter when you loaded the web page,
"; + $pg .= "it only matters when you clicked on the web page button to send the data to the pool.

"; $pg .= 'WARNING: once you have successfully tested and enabled 2FA,
'; $pg .= 'you will be unable to access or even reset your account without 2FA.
'; $pg .= 'There is no option to recover your 2FA from the web site,
';