Two Factor Authentication Requirement

[WildBill]

From address in email:

no-reply@hello.wyze.com

[SlabSlayer]

Screenshot in other thread

Two Factor Authentication Requirement

Just received an email from Wyze saying two factor authentication is now going to be required. Anyone know what this will break from a non-Wyze perspective?

[frustrated2]

Got this pop-up about an hour ago when I launched the app. I was already logged in, but since the stupid app kicks me out all the time 2FA will be INCREDIBLY ANNOYING.

Wyze gets more and more stupid and evil every day. I don’t trust you idiots with my phone number.

[SlabSlayer]

I don’t use my phone number or SMS.

I use an authenticator app for Android:

play.google.com

ID.me Authenticator

ID.me Authenticator is a simple and free Two Factor Authentication solutio...

Free

[Customer]

We’ve noted before - look back over 3 years of the forum and you’ll find dozens of people stranded from their own cameras due to 2FA, and look over the same period of time and you’ll find ZERO reports of people grateful to have had 2FA, for any reason. It’s appropriate for people who need or want it - bedroom cams et al. - it is NOT appropriate and is a huge pain for those who neither need nor want it.

Thank you for identifying the economic incentive - Wyze offloading support calls and reputational damage onto ALL their customers rather than dealing with the very few who let their passwords get away from them. It’s shameful.

And if Google’s is the most light handed model then we’re still in trouble. I’ve had multiple issues trying to support relatives for Gmail and Photos and Android etc., even though I had their credentials AND my phone was associated with their account. Have you ever tried talking an elderly person through the process of clicking or reporting the right digit back in a timely fashion so you can proceed to fix their problem?

MFA is always a hassle, so it had darn well better be worth doing. Forcing it for these cameras is ludicrous. And meanwhile their V1 customers have been locked out of functionality for 6 months and they still don’t have any real fix. What a set of priorities.

[WildBill]

@carverofchoice

I am actually surprised Wyze didn’t enforce this a long time ago like lots of (if not MOST) other major companies do…and few people avoid the other major companies from forced 2FA

Funny, my banks don’t require it. They offer it, but only as SMS which isn’t very secure. I’d use Authy if they supported any authenticator apps.

[Customer]

Yeah that was a weird point actually. Most major companies? Amazon doesn’t. Google doesn’t. Microsoft doesn’t. Best Buy doesn’t. No major retailer I can think of does. Just the majority of banks and financial services.

I think it’s Wyze who’s the outlier here.

[Omgitstony]

Merged multiple threads into this one…

[WildBill]

So one question might be, what lawsuit is Wyze trying to prevent? Is this like the security issue they found with the cameras?

[frustrated2]

I got this popup when I opened the app. It’s legit from Wyze, and legit irritating AF.

[WildBill]

Why didn’t Wyze announce this on the forum? They should be putting this out everywhere rather than just email again.

[frustrated2]

All 100% true! I’m absolutely furious about this. These cameras help me protect elderly family members with dementia, I really don’t need MORE hassles in my life.

[IEatBeans]

Again, this is only when you first log into the app, or sometimes after app updates. It won’t affect your usage of the app in any way after the first login.

[WildBill]

I think I’ll retire to bedlam now. My knee replacement surgery tomorrow is beginning to sound like fun.

@IEatBeans

It won’t affect your usage of the app in any way after the first login.

Famous last word like, “This won’t hurt a bit!”

[carverofchoice]

Oh yeah, get some rest buddy, best wishes on your surgery!

[SlabSlayer]

Holy Cow Bill!

Bless you! Good luck! I can’t say as I have heard those are easy surgeries to recover from! Two family members had them and they are said to make a real man out of you.

Wishing you a speedy recovery!

[Customer]

@IEatBeans

Again, this is only when you first log into the app, or sometimes after app updates. It won’t affect your usage of the app in any way after the first login

You might bet on that, but I sure wouldn’t. And good luck for anyone having to change a phone number. As it currently reads, they will never be able to use their account again. And that’s assuming everything works right in the first place.

Best of luck, Joe and Jane Average Wyze users.

At least you’ll have the satisfaction of helping distance Wyze from its last security scandal, I guess.

Two-Factor Authentication

Two-Factor Authentication

Brenda

July 06, 2022 19:46

Wyze accounts have the option of being secured with Two-Factor Authentication (2FA) to help provide you with more control over who can access your account.

What is Two-Factor Authentication (2FA)?

Two-factor authentication is a method of securing your account with a secondary authentication token. This secondary token is generated after you enter your email and password, and is a requirement to sign in as long as 2FA is enabled on your account.

We have two options available:

• Text message (SMS): Sends you a text containing the associated key or code.
• Authenticator app: Pairs to your account, then continually generates codes on a short timer which act as the needed key.

To enable SMS Two-Factor Authentication:

1. In the Wyze app, tap Account.
2. Tap Security > Two-Factor Authentication .
3. On the next screen, select Verification by SMS (text message).
4. Enter the phone number that you’d like to receive your verification codes.
5. Tap Verify Phone Number.

• You’ll receive a text message with your verification code. Copy this code.

6. Paste the code on the Enter Code screen, then tap Next.
7. Optional step: Add a Backup Number. To skip, tap Skip for Now.

• This number will only be used if your primary number is unusable.
• A text will not be sent to the backup phone unless you tap Use Backup when logging in.

Note: Once you’ve successfully set up 2FA on your account, you’ll receive a 6-digit verification code every time you try to log into your account in the Wyze app. Enter this code into the prompt that appears on the sign in screen. If the code doesn’t match, try logging in again to receive a replacement code. Each code is valid for up to 30 minutes if it is not used but will be refreshed immediately once it is successfully entered.

To use your Backup Number:

Tap Use Backup when prompted for the verification code. A text message with the code will be sent to your backup number.

To enable Authenticator App Two-Factor Authentication:

Before starting, be sure to download the authenticator app you prefer. A few popular ones are Google Authenticator and Duo Security.

1. In the Wyze app, tap Account.
2. Tap Security > Two-Factor Authentication .
3. On the next screen, select Verification by Authentication App.
4. Open your authenticator app, and select Add Account.
5. Copy the code provided by the Wyze app to the Authenticator app.

• If your preferred Authenticator app directs to QR entry, look for an option that lets you enter the code manually. The Wyze app will not provide you with a QR code.

6. Once Wyze has been added to the authenticator app, copy the provided code from the Authenticator app to the Wyze app.

Once the verification code has been copied to the Wyze app, you’ll be given a backup code that will let you back in if you’re unable to use the authenticator app. Save this in a location other than your phone to make sure it’s available should you ever need it.

Important: Once Two-Factor Authentication is enabled, the only way to modify it or turn it off is from within the Wyze app. For the purposes of security, Wyze and its employees are unable to make modifications to your Two-Factor Authentication settings on our end. This means that if you lose access to the phone number used for Two-Factor Authentication, you will need to create a new account.

Changing Two-Factor Authentication Settings

Currently, for SMS authentication, once a number has been added it can’t be changed without completely disabling the Two-Factor Authentication option from your account’s settings. Once this is done, re-enabling 2FA will walk you through adding a new Primary Number and an optional Backup Number.

For the Authenticator App version of 2FA, there is no way to retrieve your Recovery Code from within the Wyze app if you lose it. That being the case, if you ever lose your Recovery Code while still logged into the Wyze app, we recommend disabling then re-enabling 2FA to generate a new Recovery Code.

Additional Notes:

Wyze uses SMS 2FA through the Wyze app only, so isn’t needed for use with wyze.com. Wyze’s implementation of SMS 2FA requires a phone number beginning with country code +1. At this time, this is limited to North American phone numbers from both the US and Canada.

• If you are using a version of the Wyze app that doesn’t support Two-Factor Authentication, you won’t be able to log in while it’s enabled.
• Unused SMS verification codes can be used for up to 30 minutes, while most authenticator app codes can only be used for up to 30 seconds.
• Similar to using the “Forgot Password” link, if you request multiple SMS codes within the 30 minute window you’ll continue to receive the same code until it expires.

If you decided not to add a Backup Number when first enabling SMS 2FA, you can add one at any time by tapping the Backup Number option under the Two-Factor Authentication settings.

[SlabSlayer]

@Customer

You might bet on that, but I sure wouldn’t. And good luck for anyone having to change a phone number. As it currently reads, they will never be able to use their account again. And that’s assuming everything works right in the first place.

I have been using a 2FA Authenticator app for some time. A highly reputable and free one, ID.me

I do not use a phone number or SMS and my 2FA authenticator is biometrically locked. My Master Key recovery code is encrypted, backed up, and saved offsite in case my phone Mission Impossibles and I need to reconstruct the 6 Million Dollar Man.

Should it be necessary, that key will unlock my Wyze 2FA when I have to reinstall.

[SlabSlayer]

@Customer

Wyze uses SMS 2FA through the Wyze app only, so isn’t needed for use with wyze.com.

I think Wyze needs to update this statement.

Logging into my account @ services.wyze.com:

[Customer]

@SlabSlayer

I have been using a 2FA Authenticator app for some time. A highly reputable and free one, ID.me

With a 3.6 / 5 rating at your Play Store link. Just saying.

Glad you like it. I would not be comfortable trusting yet another “free” or paid 3rd party service to manage my passwords. Free GMail is about as far as I’ve gone.

This area (identity management and password brokers and chains of trust and recovery management and revokation and multifactor authentication) is far from a slam dunk or a no brainer. It’s a pretty big burden to put on users and customers. Again, for zero gain. The option was already there for those who need it.

And yeah, apparently they’re allowing 2FA by e-mail now. No idea if they’re changing recovery. That’s why I posted the full FAQ entry - they will almost certainly be significantly changing it very soon. (Yet another sign of their fire, aim, ready project management style.)