Two Step Verification

[fernechino]

This 2 step verification is very annoying.

Can anyone please advise me how I can log in to Sky email if I don't have access to the mobile to receive the code

[caesarome]

@fernechino 

When you see the (wrong) mobile number shown on screen scroll down to see if you see a small link that should allow you to change the mobile number.

[Ted845]

More annoyance over the past couple of days, it all feels a bit random at the moment.

The 'remember for thirty days' definitely isn't working for me - I get asked for 2FA every few days without any pattern. This morning I logged on fine using the saved link fine early on, but now that same link is taking me to a generic Yahoo log in page rather than the Sky log in page.

I've been able to access my emails through the Sky.com site, but have been asked for 2FA three times already in the past twelve hours despite the 'remember me for thirty days' option being ticked.

Does anybody know what is going on with Sky over all this, as from a 'non-technical' user perspective it all feels like a bit of a shambles! I assume they're making updates in the background which is what's causing my issues?

[piepowder]

I now note that 2 step verification also seemingly applies to this forum, even if signed in to e-mail already. It appears that every time you sign out of a SKY platform, even if another SKY platform is on line, then you have to repeaat the process of 2step on your mobile - with a grace period of 5 minutes. (one day I'll break my neck running downstairs to get to the phone to come back to the PC and put in the code within the 5 minutes, coz I never have and never will be a slave to a mobile phone - its there for my convenience - even on do not disturb, or switched off). I get a sense that whatever instigated the system has not actually stress tested it but rather rely on a pressumption that a) everyone has a mobile phone b) phone reception is good and c) the system is deemed reliable. Mmmmmmmm - stress testing is mandatory

[Ted845]

Yes, I'm having this 2FA every time when logging in here now as well. 

I'm convinced they're changing things in the background without really realising the second order impacts on users. It's not the end of the world, and I'm all for increased security, but this doesn't feel like they've really thought this through.

I have 2FA on pretty much every website where I have an account, and they all allow me to stay signed in unless I log out or try to change any personal details. It would be good if Sky could end up doing the same, as accessing email with all this palava is getting irritating.

If anybody from Sky does read these forums - and I guess they must do even if they claim they don't - then please could you sort this out? Look at the number of posts and unhappy customers...

[jayach]

---

@Ted845 wrote:

Yes, I'm having this 2FA every time when logging in here now as well. 

---

Yes I('m getting the 2FA when logging into the forum every time, and that doesn't have the 30 day tick box. I really does seem unnecessary for that amount of security on an open forum. 

And as @piepowder says it's completely separate to the email login.

[piepowder]

OK seemingly all change again.

I have always had 2 bookmarks on the toolbar 1) SKY main access 2) e-mail.

For a while 2SV was only required for e-mail not main site. Hence one could login to main site as usual (password), find e-mail, click, require 2SV. Yesterday it was 2 SV for e-mail and forum.

Today - change again  - 2SV to get onto SKY main and thereafter now logged in to e-mail and forum.

Go figure

I thought that purpose of 2SV was to prevent e-mail hacking, (as per OFCOM) not full site security. Interestingly as well - warning from Google of compromised passwords as soon as I go on to SKY that includes SKY. Given the overt mucking about with 2SV access it is hard not to believe something amiss in code tinkering  simultaneously without even  going down the consipracy route!

Had a Google password alert "Some of your saved passwords were found in a data breach from a site or app that you use. Your Google Account is not affected." so I have had to change 4 passwords on related accounts. Maybe someone somewhere has hacked something - I don't know; but it is all about but it is  very wierd on the timeline of coincidence

[Theresa65]

I am trying to switch off the very annoying 2 step verification, has anyone done this successfully?

[caesarome]

@Theresa65 

It can not be switch off as this is mandatory for us all now.

Best you can do  is when logging in select the "remember me" option and do not logout and then for the 30 days you should not be asked for a verification code.

[jayach]

---

@piepowder wrote:

the process of 2step on your mobile - with a grace period of 5 minutes. (one day I'll break my neck running downstairs to get to the phone to come back to the PC and put in the code within the 5 minutes, coz I never have and never will be a slave to a mobile phone - its there for my convenience - even on do not disturb, or switched off).y

---

I've been using Microsoft Phone link, so I can get the codes on my computer, to save having to find the phone, but it is a bit flaky, frequently needing reconnecting.

However thanks to a post by @lettice on the Superuser forum, assuming you have an Android phone and use a chromium based browser, you can get the codes in your browser using Google's messages on the web.

Google Messages for web

Worth a try.

[piepowder]

@jayach

thanks for the information. I do have an androud phone and use Firefox. Being a stick-in-the-mud / point-and-shoot fella who does not want to get "under-the-bonnet" I was unaware chromium was open source.  (my background in compooting  started with a BBC B and daisy wheel printer, it didn't get much simpler, and I even wrote and printed my 5 copy thesis [pre-internet] on this set up, so not really a code person, but do prefer open source as I guess scammers find it more difficult to attack due to variants). At the moment it is easier to change my behaviour by bringing the phone to the desk first thing. I guess i'll never get to the stage of doing everything on a phone, I feel it is a) asking for trouble as everything is one place and b)  a phone is to me a person-to-person thing (bakelite phone at home was it) not a means to running my life. I feel that tech is getting to the dangerous stage whereby people are scammed into losing fortunes (savings), being A-I'ed into degenerate constructions for all to see - forever, children are being harmed, rudeness and incivility abounds (given up a professional community  i've used for years due to infighting disagreement / fights), hacks, scams etc etc. Its almost Skynet territory of a wils west - at times. 'Yes' there is good but as per the pareto principle of 80:20 the 20-bad is serious incitement stuff.

Anyhow rant over and thanks again

chers

[piepowder]

@jayach

Thanks for that information. I do have an android phone and use Firefox as open source (albeit tithe’d to Google AFAIA). I didn’t realise Chromium based browsers were open source. Looking at Google messaging, seems to be to phone to PC with apps download. Personally I am pre-internet era - BBC B & daisywheel printer to write my thesis, one chapter per 7” floppy disc and ever more less getting under the hood. Really a point-and-shoot as it is all too complex and too data / code dependent as well as getting concerned of direction of travel with Artificial “Intelligence” as being somehow “smart” along with all the data stored - forever. Throw in the 80:20 rule whereby 20% do not abide by civility rules etc and also use the internet for dubious if not nefarious gains or criminality - up  to the level of abuse such as AI image manipulation to depict pornographic imagery or scamming or hacking or other such things that make the Wild West seem civilised - and hence why I move away, not towards, technology. Infighting and rudeness seem to be ever present of keyboard warriors a surprise that meant I left a closed website of professionals due to unacceptable behaviour when differences were aired.

Sorry for the rant, but this 2 stage verification is to me a symptom of the malevolence that exists on the internet - a global potential argument that seemingly has let undesirable / criminal activity to the fore.

I veer towards open  source as I suspect hackers cannot take on the high number of variables of OS / browser - targeting instead the big ones such as the silicon valley 2.

Anyhow I have to adjust my behaviour and bring the phone to the PC to venture onto SKY as a pre-sign in. Best solution at the moment.

But thanks anyhow

cheers

[jayach]

---

@piepowder wrote:

@jayach

Looking at Google messaging, seems to be to phone to PC with apps download.

---

No, it just runs in a browser tab, personally I like Brave, but any chromium based browser should work.

I have it as my first tab (I have Sky email second and this forum third) so it is easily reached when I need to copy and paste the code, although it can optionally run as a PWA app.

What Op system are you using?

Edit, I've just tried it and it does work in Firefox, it just needs pairing with the phone.

[piepowder]

Thanks for that and your effort to test it. i'll maybe give it a try on Firefox. As I said I am a point-and-shoot type of person and not into this under-the-bonnet tech fiddling. OK I have been exposed to scamming and almost fell for one (happened admist a crisis) and accept anyone can get caught out, however, the corporate mentality of imposition akin to Politburo style management ("we aren't asking, we're telling, you must comply") I feel treats people with indifference. Similar to government imposed modification matters on legislation without any form of consultation.  (Look up Statutory Instrument on Google). Hence I guess many users here are similarly and hence deeply fraught, Can anything be done? Only is there is willingness to allow individuals to opt out. Personally I don't see why not - provided the user understands and accepts the consequential potential risks- as in life. But hey ho I ramble on. I'm not criticising anyone or organisation per se - but there has to be some other way. A  parallel I sometimes order stuff online from Boots - will not work on firefox, only on Edge, and demands 2 step verification depsite the box of "don't ask me again" being ticked. So it isn't just here that online "providers" seem to treat their customers with disdain. Boots feedback doesn't seem to recognise the issue either. Sometimes change can be vert tiresome irrespective of the perceived alleged benefit.  At this rate all contact sports will be banned e.g. skiiing lest there becomes a legal case etc etc etc

[piepowder]

@jayach

excellent solution of Google messaging on PC. I struggled at first as I didn't realise one had to find the actual site and then bookmark Google Messaging for PC as in Google messaging for web. Thereafter simple to put bookmark adjacent to SKY bookmark - as you kindly suggested. Given messages (Google app seemingly) were already on Android phone pairing was straightforward even for an old f*** like me. Obviously I don't know - but it might work for non-UK mobiles. Failing that as someone else suggested on this forum - burner phone with UK number. Either way I no longer have to hike the phone to the desk PC. (I know how quaint to have a PC on a desk, but I hate laptops and always have done so).

So again my thanks - your help is invaluable.

cheers