Workaround to Log in to Tesla phone app with 2FA

[Transformer]

We changed our Tesla passwords after the latest LastPass breach. [If you're using LastPass, you'd better change all those passwords and move to another password manager because the stolen vaults will eventually get decrypted. The vault's URLs are not encrypted, so the hackers already know you have a tesla.com account, where you bank, etc. Anticipate spear-phishing attacks that try to get you to log into fake Tesla, lastpass, and bank accounts.]

After the change, you'll have to log in again to the Tesla phone app. With 2FA enabled, it's now tricky [didn't used to be]:

1. Enter your user ID.
2. Enter your password.
3. It asks for a 2FA code.
   --> Switch to your authenticator app and copy the code.
4. Switch back to the Tesla app. --> It restarts the login sequence.

No dice. The app has a bug such that you can't get a 2FA code from the same phone and continue the log in sequence. It might work to copy the code in advance but it'll probably be stale by the time you paste it in.

Start over:

1. Switch to your authenticator app.
2. Enter split screen mode (See two apps at the same time on Pixel phone - Pixel Phone Help) with the authenticator app above the Tesla app.
   Note: Only some authenticator apps can go into split screen mode. Google Authenticator and Duo Mobile can.
3. Enter your user ID into the Tesla app.
4. Enter your password.
5. It asks for a 2FA code.
   --> Now you can see the code in the upper window and type it into the lower window. (Copy/paste might also work.)
   --> It accepts the code and ... goes back to the user ID screen???
6. Repeat the user ID, password, and 2FA steps.
   --> The second go-round works!

 

[Blorno]

Brilliant. Thank you!

 

[troyf]

TESLA, THIS IS AN BUG REPORT. 11-APR-2023, latest android, Nexus 4, latest app. See initial post.
=
Two months later, this was my workaround. Note, Two months... you'd think this would have been fixed by now!
o Log into lasspass so you don't need to enter that password later. Make sure auto-fill is enabled.
o Go to the authenticator. Wait until the code changes and copy your MFA information to the clip board, then immediately...
o Launch the tesla app and click the login button. The user fills from lastpass. Click next, the password fills, click next
o Paste your MFA information, click login.
You have 30 seconds until new MFA is required.
Troy.
#

 

[Transformer]

Two months later, this was my workaround. ...

Good idea.

Do get away from LastPass.

1Password seems to be the most secure. the first two lines of this comparison table matter a lot:

Make the switch to 1Password | 1Password

Time for a new password manager? Discover what makes 1Password different.

1password.com

 

[PianoAl]

Has this bug been fixed yet?