Support

 When Joomla broke the two-factor Google Authenticator in ver. 3.6.3, I was able to disable the two-factor authenticator by going to the plugins>twofactorauth>totp and rename the folder and this allowed me to at least login to update the Joomla OS to ver. 3.6.4 . When I made this change I no longer saw the two-factor secret box in the login. Only the user name and password were seen.

When I tried this again the two-factor secret box still shows up.

I am pretty sure I have now lock myself out with Admin tools after trying more then 5 times to log in.

any help would be appreciated.

You are the very first person to do this (today). :-)

The instructions for how to disable Admin Tools through FTP are here: https://www.akeebabackup.com/documentation/troubleshooter/atwafissues.html. That should get you back in and let you disable two factor authentication for your user and clear the auto ban on your IP address.

Dale:

I can't seem to get passed the two-factor secret key. I tried renaming it but that does not seem to work any more.

plugins>twofactorauth>totp . I have changed the name of the folder to totp-disable and I still see the request for a secret key when I try to login.

One question. If I disable the Admin tools, I only have to type into the url the website.com/administrator correct?

You are correct about the plain URL. If you type in the secret parameter, it will ignore it.

Renaming the folder should work to disable two factor, you my be seeing the plugin served out of a cache. Clear your browser cache, then you need to think about Joomla! cache, PHP cache, host cache, they're everywhere these days.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.