Bitbucket OTP reset

klim

Hello,

Im an ADMIN in the bitbucket of our company, is there a way for me to reset the OTP of a user if the user is not receiving any OTP on his device

Christos Markoulatos -Relational-

Hi @klim ,

It depends on whether you are on Bitbucket Cloud or Bitbucket Data Center, and on Cloud a Bitbucket workspace admin cannot reset it. Which one are you on?

Bitbucket Cloud

Login goes through the user's Atlassian account, so the reset is done there, not in Bitbucket.

1. If the account is a managed account of your organization, an organization admin can reset it:
   • Go to admin.atlassian.com and select your organization.
   • Select Directory, then Users.
   • Set the Account type filter to Managed accounts and open the user.
   • Select the Security tab.
   • In the Authentication policies table, select more actions (•••), then Reset two-step verification.
   • If two-step verification is enforced by an authentication policy, first move the user to a policy where it is optional, reset, let them log in and set it up again, then move them back.
2. If the account is not managed by your organization, no admin can reset it. The user recovers it themselves:
   • On the login screen, after email and password, select "Can't use your phone?".
   • Enter the emergency recovery key.
   • If the key is lost, select "Can't find your recovery key" and request a recovery email. A login link arrives after a 24 hour wait.

If the user gets codes from an authenticator app and they are rejected, also check that the clock on the phone is correct.

Bitbucket Data Center (built-in two-step verification)

The second step is a code from an authenticator app, so nothing is sent to the device. The user can log in with the recovery key from setup. If that is lost too, a system admin can unenroll the user over REST:

DELETE <base-url>/rest/tsv/latest/totp/unenroll/user/{username}
Body: { "totpCode": "<your own current TOTP code>" }

The system admin must have two-step verification set up themselves, and the call needs a valid admin session cookie. A 204 response means the user was unenrolled and can enroll again.

If your OTP comes from a third-party 2FA app instead, the reset is in that app's admin settings.

• Make changes to a managed account
• Enforce two-step verification
• Login issues related to two-step verification
• How to Disable/Reset 2FA on Bitbucket Cloud and Atlassian Account
• Enable two-step verification (Bitbucket Cloud)
• Manage two-step verification for your Atlassian account (Data Center)