Repeated random verification codes sent

[dee4848]

Describe the bug

Hi. In the last week or so... the plug-in has suddenly started sending repeated verification codes to my email address, several times a day....regardless of whether I've logged in at all that day or not? Would like advice as to how to stop this, as the plug in works fine otherwise. ....however, it makes me wonder if it is now unstable?

Steps to Reproduce

?

?
?

Screenshots, screen recording, code snippet

Sorry. How can I offer steps to reproduce? The plug in is sending random verification codes when I'm not logging in? it just sends them?

Environment information

latest
element hello
Safari

Please confirm that you have searched existing issues in this repository.

Yes

Please confirm that you have tested with all plugins deactivated except Two-Factor.

No

[JurriaanK]

Maybe your password is compromised and someone else is trying to login with it....

[dd32]

Unfortunately it sounds like the plugin is doing it's job, and preventing a login when the username/password combo is known.

This is one of the reasons for #477

If Email doesn't have a rate-limit on the 2FA codes, or, there isn't wording in the email to suggest something like the following, maybe we should add it..

Didn't expect this?
A user from IP ADDRESS has successfully authenticated as USERNAME.
If this was not you, please change your password

[dee4848]

Thanks guys. Have changed password. Baffled as to how anyone could have identified my username and password but thank goodness for this plug in! The only thing is I also have a failed log-in plug-in which didn't activate? Hopefully the issue is sorted and thanks again. Now I think of it...There was a complete meltdown of my web host providers in the summer. I wonder if that could have compromised passwords.... anyway...thanks again...