Bitbucket 2FA Verification Codes Consistently Rejected

Question

Hello Atlassian Support Team,

I am experiencing an issue with two-factor authentication (2FA) on my Bitbucket account. The verification codes generated by my authenticator app are consistently being rejected as incorrect.

To troubleshoot the issue, I have:

* Disabled and attempted to set up 2FA again.
* Tried using both Google Authenticator and Authy.
* Verified the setup again, but the generated verification codes are still rejected.

Despite these attempts, I have been unable to get 2FA verification working successfully.

Could you please investigate this issue and advise me on how to restore access to my account and get 2FA working correctly?

Please let me know if you require any additional information to troubleshoot the problem.

Thank you for your assistance.

Best regards

Christos Markoulatos -Relational- · Answer

Hi @Saad Rafique ,

Quick note first: this is the user community, not Atlassian support, so nobody here can look into your account. If you need that, raise a ticket at support.atlassian.com. But your symptom is similar with something i encountered before.

Codes rejected every time, with two different apps, after a clean re-setup, is almost always the clock. Authenticator codes are time based; if your phone is more than about 30 seconds off, every code is wrong even though the setup looked fine. Check the phone's date and time are set to automatic (network time), including the time zone, then try again. On Android, Google Authenticator also has "Time correction for codes" in its settings, run that once.

Two other things to check:

* Make sure you are entering the code on the right screen. Bitbucket Cloud login goes through your Atlassian account, and that is where two-step verification is set up now (id.atlassian.com, Security). If you set it up in one place and are being asked for a code on a screen with a different look, you are feeding codes from the wrong enrolment.
* Type the code fresh, straight after it changes, no spaces. Sounds silly, but a code typed in the last 5 seconds of its window fails often enough.

If you are locked out right now, use the recovery key you were given during setup ("Can't use your phone?" on the login screen). If you don't have it, the recovery flow sends an email and makes you wait 24 hours, nobody can shorten that.

Any info like @Arkadiusz Wroblewski says u can share with us it would help narrow down the issue further.

Hope this helps!

Arkadiusz Wroblewski · Answer

Hi @Saad Rafique

One thing to check, Bitbucket and your Atlassian account can have separate 2FA configurations, each requiring its own authenticator code.

https://support.atlassian.com/bitbucket-cloud/docs/enable-two-step-verification/

Does the error occur during 2FA setup or sign-in? Is the prompt from Bitbucket or your Atlassian account?

Best,

Arek🤠🧙‍♂️