Emergency login in case of lost access

aratokenaratoken
in Windows command line
Hi! i am currently using multiOTP successfully in a testing environment but there is one question that i have not yet found a clear answer to. Is there a way to restore access in case if i lose my ability to log into for example the Administrator account (For example lost phone)? Can i create backup codes or similar to temporarely disable multiOTP? If not what would be the usual approach? Thank you!

Comments

  • YannJYannJ
    edited July 29
    Hello, There is no backup code.

    If you loose access to your computer and multiOTP server is setup on the same computer then you need to reboot Windows in safe mode en remove the two dll's (c:\Windows\System32\multiOTPCredentialProvider.dll et c:\Windows\System32\multiOTPCredentialProviderFilter.dll).

    You can also use the registry key excluded_account to specify an account that should be excluded from 2FA. The format is required to be domain\username or computername\username.

    You can also create a user with token Without2FA. This type of user never needs 2FA to login.

    Best regards
  • aratokenaratoken
    Hi Yannj, thank you for your response! i have tried to create a user without 2fa, however when trying to log in with it the system still prompts me for a otp code. Are there any additional steps to perform to ensure the without2fa is correctly set? I have created the user with "multiotp -fastcreatenopin (user) without2fa" Thank you!
  • YannJYannJ
    edited July 31
    Hello, the option -fastcreatenopin doesn't accept a parameter after the username.

    Please use : multiotp -create (user) without2FA

    Best regards
Sign In or Register to comment.

© Vanilla Keystone Theme 2025