Etsy Please Don't Make 2FA Mandatory (or fix it)

[#1]

Dear Etsy, I have five shops on Etsy and bounce between them all day. 2FA sounds great, but not when I have to stop, wait, and look at my phone, and type in a code EVERY time I go from one shop to another. It's one of those things that seemed great in theory, but it needs to be fixed! How about only asking for the code IF it's a NEW computer or NEW IP or device, (like other websites do) not the same one that has  logged into the account twice that day already?  I do love the idea of extra security, yes to that, but not if it means constantly checking my phone for a code (5 plus times a day)! I have to turn the feature off for now, and if it becomes mandatory I'll go bonkers.

I realize most people don't have multiple shops, but there are many users who do. 

If you need to know why I have multiple shops, it's because I sell multiple, unrelated things that don't fit well in one shop.

[ChillwolfArt]

Quite honestly I have seen Shops saying they were Hacked and they had 2 Factor Auth. 

[bradgoodell]

Many of them had it happen after they fell for one of the latest scams:  Buyer sends a link to "design files" or "shopping list".  Malware.  

The other common scam catching sellers is a buyer says they can't check out, and then the seller gets an email from FAKE Etsy saying they need to do X to get checkout working.  The email has a link to a spoofed Etsy login page, and the seller hands over their login info.

There are a couple of other variations if this.  

[ThePurplePuppy]

@ChillwolfArt  Yes! I have sen that too--over and over several times!

I personally think these hacks are done by people thinking an email with a link was safe and they get a keystroke logger on their computer.

I got warned by my antivirus TWICE that this was happening. And I had not even clicked on the link. Last time I eeven took my computer in to tech support to make sure.

[ThePurplePuppy]

@bradgoodell 

Yup!
People fall for this stuff.

Call me paranoid--I am SO paranoid I probably delete real stuff!

[cindylouwho2]

@ChillwolfArt there were a few hacked with 2FA a couple of years back; hackers got Support to change the info during a phone call. I believe Etsy has fixed that loophole now. 

[ChillwolfArt]

@ThePurplePuppy  Hey little Puppy, if you're paranoid, I'm right there with you.

I don't click any links.  Not even Tabs within the Etsy emails, "See More..", "Learn More...". Or click onto this item or that.  ""Because you Favorited..."

I have one Etsy Email which always goes to Spam, while the others do not (such as "This Week in your Shop", etc.) The one in Spam also X's out any photos "for safety reasons".  I really have no idea why this particular one always goes to Spam, yet the others don't.

[ThePurplePuppy]

@ChillwolfArt 

Well, I am glad someone shares paranoia with me!

I learned VERY early on--back when we had to write in DOS--before there was such a thing as windows. Got an email from a friend. Had a virus in the link--it was a mess getting rid of it.

That taught me to trust nothing on the internet.

Right now--this very minute--I had a scare last week--took my computer in to techie. I noticed yesterday he had removed my malwarebytes program!  Now I am even afraid to download it again as in---is the site that comes up  in google the REAL malwarebytes!

I may have to go back and have a word with that guy as o why he did it!

[BagmakerSupply]

@RabbitTarot: https://community.etsy.com/t5/Technical-Issues/Seller-Account-Hacked-HELP/m-p/142469849#M781249 is why 2FA, while not a perfect solution, is important even if inconvenient.

[amoremosaic]

Just came here to see if anyone else is having problems.  I am sending this from a closed shop, trying to sign into my very active/busy shop.  After entering my password, it is pops up saying a verification code is being sent to my phone.  It's been over 15 minutes and I still haven't received it!  Anyone have any ideas.  I have so much work to do!  Thank you!

[BagmakerSupply]

@amoremosaic: There have been reports that if you are logged into the account on multiple devices there is a delay and / or error in sending the codes.

If you downloaded the backup codes available when you set up the two factor authentication, you should be able to use one of those.

[cindylouwho2]

@amoremosaic use the backup codes they gave you when you signed up for 2FA. 

Otherwise, you will have to contact Support for help. https://help.etsy.com/hc/en-us/requests/new?segment=selling#issue_account_trouble_signing_in-contact...

[amoremosaic]

@BagmakerSupply, thank you!  I wonder if it has anything to do with being in the new seller app?  

@cindylouwho2 thank you.  Unfortunately, I can't find the back-up codes.  I tried sending message to support from the app but am getting "Requester: Email: amoretreasure is not properly formatted."  Will try from desktop from closed shop.

LOL, just tried turning off 2FA from seller app and "for security purposes, we've sent a code to the phone number..." Of course, I've received no code!   

[Spellbinderie]

@amoremosaic 

Try logging in from another device.  For example from the app rather than your desktop.

Someone else reported having an issue with not receiving the code the first time but got it the 2nd time by doing this.

Keeping the backup codes handy is super important if you decide to activate 2FA because things can go wrong.

[ThePurplePuppy]

@amoremosaic, et al; and this sort of nonsense is EXACTLY why I do not want to be forced in to doing this!

[amoremosaic]

@Spellbinderie, thanks. As it turns out, I'm actually signed into the store I'm trying to get into on my laptop.  I was also in that one on the seller app. Signed out of the seller app but still having the same problem with 2PV trying to sign in from my desktop.  I don't want to sign out of my laptop too as I can do some work from there and who knows how long it will take them to resolve this.  (It's very odd that I'm still actually signed into the correct shop on my desktop).  I opened a help ticket and they responded asking for account verification info (last 4 bank account, last 4 credit card, last 4 tax id) so they can turn off 2PV.  Haven't heard back yet...  

[AmoreTreasure]

(this is "amoremosaic" from my active shop)  Update: so after MANY email exchanges and a chat thrown in for good measure, Etsy removed the 2 part authentication from my account.  They didn't seem to know why there was a problem and speculated that it must be a "technical glitch" then encouraged me to set it back up.  Today I tried.  As part of setup I chose that I wanted verification code to go to my phone.  When I hit the "send code" button so that I can receive it, fill it in on the screen and continue with setup, I get a message that the code was sent but, big shock, I don't receive it.  So now initiated about round 5 with technical support.

[cindylouwho2]

In addition to the very good advice to use more than one browser, did you know that you can also use incognito/private windows in the same browser to keep 2 shops open at the same time? Sign into one in the regular browser, and another shop incognito. I used to do this on my Chromebook when I still had a second shop. 

So if you had 2 different browsers installed, you could be signed into 4 shops at the same time. 

[ThePurplePuppy]

@cindylouwho2 

This is what I do all the time (I have 3 shops)

[ArtDollsbyJD]

I did that a few times on my browser  when I had more than one shop and it was a failure.  

I would not recommend it.

[ArtDollsbyJD]

I wish Etsy would allow email for the 2fa.  It works for other sites that have security needs.  Why can't Etsy?

[DesertChains]

I use text codes, but this also makes sense as an option.

[PiecesOfMePaperCraft]

I got the 2FA prompt today and x-ed out of it. I have an iphone and laptop but I honestly don't want to deal with this. Normally I roll with whatever Etsy throws at us but I've seen others have issues with it. I only have 2FA set up on an old email account that kept getting hacked even with security questions set up (it was Xfinity of all sites, you'd think they'd have tighter security). I don't use the email often but when I do, no matter where I am I have to deal with the 2FA code. A lot of times it makes me sign in twice because apparently once isn't enough, so that means typing in two codes. Ugh. Just knowing how Etsy lacks in tech skills makes me hesitate to do this.

[LastCentury]

And Etsy still hasn't figured out a way for us to toggle between shops within the same browser? We can do it on the app!

@RabbitTarot 5 shops!!! they all need to be declared in each of your shop profiles. I see the names in your About section but you can turn them all in to live links so buyers can get to them quickly, making it easier for them to spend more money in your universe.

[BagmakerSupply]

@LastCentury: "toggle between shops within the same browser" It is because of cookie conflicts - hard to implement successfully unless you force everyone to use the same one browser on the same one operating system.

[lalarossa]

I think two-step login is a good idea but... I'm in Poland. When trying to install this feature, it turned out that only SMS with a verification code is involved. And then a box popped up that said, Fees may apply. I realized that text messages can be sent from the United States or Ireland, which means that I will have to pay for each login and I don't even know how much. I log in several times a day on my computer. I use the app outside the home. What about the app on your phone? I don't have a second phone to receive text messages. I have canceled this service for now. If it becomes mandatory, I don't know what I'll do.