Password reset as in can’t login with valid password. The only way to login is to click the forgot password link sending verification code for password reset. Looks like someone introduced a bug for those of us not using 2FA.
Was able to log in this morning with no issues.
I have been using 2FA since i have been using Wyze. How i noticed something occurred was on my Wyze App around 730 est and then it forced logged me out. When i logged in with my password it told me it was invalid. I then started the process of resetting which was never successful because of the servers being overloaded. I was able to login this morning with my same password and didn’t require a reset. I will probably reset my password but since it is not used anywhere else I will wait till confirm a data breach occurred.
I’ve logged in with 3 different beta apps on two devices with no problems (other than the darn tiny keyboard)
/edit - not with 2FA
Interesting, I did not run into that on either account. Mine which uses 2FA, or the one I setup for a neighbor which does not use 2FA. And I am not seeing anyone else reporting that issue. That’s what’s making me lean towards something on your end?
If you tried to authenticate several times when the 2FA servers were overloaded, then you probably received multiple codes after they finally caught up. ![]()
EDIT: If you continue to receive the codes, then change your password.
I had to set up both of my Wyze cams again. Now I’m unable to share.
I am not using 2FA right now and just needed to login with my current Wyze account password. I did not have to reset it.
No, they were both this morning. I logged in and recieved it from one number. Then changed password, logged back in, I got a code from the other number. I just want to know if they are both numbers used by Wyze to send out codes.
Yes, they are. Multiple numbers are used by the 2FA service.
Please vote for this alternate 2FA feature: Add authenticator app(s) for 2 Factor Authentication (2FA)
Voted! After this scare i think it is important we have this.
Both of my cameras say they’re offline. I’ve tried updating the app, checked internet and power cycled them and I keep getting the error code 90 message.
I have run into this before as well. I would remove the camera from your app and re-add it. Welcome to the community ![]()
Yes, they did. Wyze chose to ignore them until the go public date came. Bad decision!
Unless you get a new phone and forget to login to an app (or 3 ) before resetting your old phone. App won’t accept the 2FA code from the new phone.
you need to keep up, I think you may have missed a few developments.
Keep in mind that if this breach is real MFA via an auth app wouldn’t have stopped this.
Of course not, but it would absolutely have prevented the DoS created by a 2+ million user base all attempting to login with SMS 2FA. The delay getting back in is 100% a result of the 2FA method chosen and deployed by Wyze.
PS - I really like the company and the hardware; the above comment is not an attack in them, but an effort to properly educate users as to what’s going on.
EDIT: To better articulate the point, had Wyze offered 2FA via an authentication app, everyone here complaining about the SMS issue would not be here complaining about the SMS issue.
Authy is stored safely via a Encryption key and the data stored in their service is only decryptable by your password. This works on a pc, phone or other device. So even if you get a new phone, or forget to login to an app before resetting your old phone, you still have all your 2FA safely stored.