I disabled MFA because MFA is broken (I use KeePassXC for MFA) but bitbucket requires MFA to login

MonkyGames

After Atlassian changed everything last year, MFA no longer works on my account. I have been using up my MFA recovery codes. I only have 2 left.

I have tried changing MFA several times. It appears to work. But when I go to login with MFA, it denies me. The only credential that works is OLD recovery codes (prior to Atlassian breaking their web site last year).

The new MFA recovery codes that you can generate, DON"T WORK!

On top of capping the free accounts usage, Atlassian is trying to block access by a 'buggy' MFA implementation for FREE ACCOUNTS ONLY.

I know because my work place uses bitbucket and we have NO MFA Issues at all. 

### Summary

• Atlassian broke their site by nerfing free accounts 
• Atlassian locked out free accounts if they went over their data limit
• Atlassian locked out free accounts by breaking their MFA with ZERO resolution

 

 

 

Theodora Boudale

Hi @MonkyGames,

Bitbucket Cloud uses Atlassian accounts (the ones for https://id.atlassian.com/) for authentication. At the moment, it is possible to set up 2FA both on a Bitbucket account and also on the linked Atlassian account.

Does the affected account have the same email address as the community account you used to make this post? If so, this account has only Bitbucket 2FA enabled at the moment.

2FA codes for Bitbucket won't work for Atlassian 2FA and vice versa. If the authenticator app on your phone is for Atlassian 2FA (if you had that enabled in the past), then these codes will not work for Bitbucket 2FA.

If the authenticator app on your phone is for Bitbucket 2FA, you can check the suggestions here:

• https://support.atlassian.com/bitbucket-cloud/docs/enable-two-step-verification/#Troubleshooting-two-step-verification

If the authenticator app on your phone is for Atlassian account 2FA, and if you are already logged in Bitbucket, you can disable Bitbucket 2FA from this page:

• https://bitbucket.org/account/settings/two-step-verification/

Atlassian account 2FA can be enabled or disabled from this page:

• https://id.atlassian.com/manage-profile/security/two-step-verification

If you have no more recovery codes and are not logged in Bitbucket, you can disable 2FA and recover the account via email, you can check the steps on this article:

• https://confluence.atlassian.com/bbkb/how-to-disable-reset-2fa-on-bitbucket-cloud-and-atlassian-account-1236932929.html

You can always enable 2FA later, either for Bitbucket or for the Atlassian account.

Please feel free to let me know if you have any questions.

Kind regards,
Theodora