Forced to use recorvery code when logging in because of non-existing hardware key

ObiJan

When I try to login in bitbucket, after entering my (correct) username and password, I am asked to authenticate with a hardware key or a passkey.  

I have neither attached to my account. 
I tried adding them and removing a time-based MFA and a passkey, nothing helps.

I can only login with my (few remaining) recovery codes.  Please advise. 

Theodora Boudale

Hi @ObiJan and welcome to the community.

Can you please confirm if you are logging in to Bitbucket Cloud (https://bitbucket.org/)? I see that your question has the tag 'bitbucket-cloud', but you mention log in with username and password, while log in to Bitbucket Cloud from browser is done with an email address (instead of a username).

If this is indeed Bitbucket Cloud, there are two places to check for security keys and disable 2FA.

 

Atlassian account 2FA

I am quoting the instructions from our documentation on how to remove a security key, if you see it listed there:

Manage your security keys

You can add multiple security keys, delete keys and rename keys.

1. From the Two-step verification page, enter your Account password and select Unlock settings 

   1. You won't see this option if you recently entered your password.

2. Manage your security keys under Manage security keys

   1. Cick on Register new key to add a new key

   2. Click on Delete to delete a key

   3. Click on the key name to Rename a key

 

There should also be a link at the bottom of the page (in https://id.atlassian.com/manage-profile/security/two-step-verification) to disable Atlassian account two-step verification.

 

Bitbucket Cloud 2FA

It can be managed from the following page:

• https://bitbucket.org/account/settings/two-step-verification/

I am attaching a sample screenshot of this page:

If you see a security key listed, like in the screenshot above, please click the x icon in the row with this key to remove it.

You can also click the link Disable two-step verification (top right corner in the screenshot) to disable Bitbucket 2FA.

 

After you check all the above, please open an Incognito / Private window of your browser and try to log in again to see if you get the same prompts or not.

Kind regards,
Theodora