Issue 413 in google-authenticator: Different (out of sync) secret code for the same account on different smartphones (android)

[google-aut...@googlecode.com]

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 413 by dco...@gmail.com: Different (out of sync) secret code for
the same account on different smartphones (android)
http://code.google.com/p/google-authenticator/issues/detail?id=413

Hi,

I have a plugin installed in my roundcubemail setup, and two smartphones
with the Google App for the 2nd password. For the same email account, the
auth
code differs. One is valid, one is not. On both I tried to sync the
system for time corrections (no errors returned).

What steps will reproduce the problem?
1. Install the plugin, and generate the secret key or QR code in one account
2. Scan the QR with both phones or enter manually the secret code
3. Compare the google-auth generated 2nd password

What is the expected output? What do you see instead?

The google-auth code should be the same on both phones. We receive two
different codes for the same email account. One is correct, one is not (by
a few hundred digits) making it impossible to enter in the webmail with the
code generated on the second phone.

What version of the product are you using? On what operating system?

googlle-auth: 2.49

Valid code: Galaxy Nexus with 4.3 Jelly Bean
Invalid code: BQ Aquaris E5 with 4.4 KitKat

Please provide any additional information below.

When trying on a Samsung Galaxy S2 with 4.1 ICS it works properly.

--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[google-aut...@googlecode.com]

Comment #1 on issue 413 by islom.dj...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
http://code.google.com/p/google-authenticator/issues/detail?id=413

I can confirm this issue. After updating to Android 4.4.2 KitKat on my iNew
V3, Authenticator generates incorrect code. However if I register the same
account to Samsung Galaxy S2 with JellyBean, it works.

Have tried to change the code and rescan barcode many-many times, codes are
not accepted by the Gmail or any other service. If I enter the secret code
manually on both devices, I get very close numbers on them, but one is
correct and another is incorrect. Difference is around 50-2000, for
example: right one is 349196 and wrong one is 350622.

If I wait for very-very long time, I can occasionaly see same numbers, but
as numbers keeps generated, the difference is going bigger and bigger.

Additional information:

Before this I had Android version 4.2.2 and authenticator worked perfectly.

[google-aut...@googlecode.com]

Comment #2 on issue 413 by islom.dj...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
http://code.google.com/p/google-authenticator/issues/detail?id=413

How can I help to debug this issue? After updating to Android 4.4.2 I
cannot use Authenticator anymore.

[google-aut...@googlecode.com]

Comment #3 on issue 413 by Damms...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
http://code.google.com/p/google-authenticator/issues/detail?id=413

Same here. Valid Codes on 4.2.2, invalid Codes on 4.4.2 !

Please fix!

[google-aut...@googlecode.com]

Comment #4 on issue 413 by islom.dj...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
http://code.google.com/p/google-authenticator/issues/detail?id=413

I think we should escalate the priority to High, because it is critical
defect.

[google-aut...@googlecode.com]

Comment #5 on issue 413 by lyco2...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
http://code.google.com/p/google-authenticator/issues/detail?id=413

Cant get valide Codes on my Acer Liquid E700 (Android 4.4.2) too. Who can
set prio higher?

[google-aut...@googlecode.com]

Comment #6 on issue 413 by qui...@gmail.com: Different (out of sync) secret

code for the same account on different smartphones (android)

https://code.google.com/p/google-authenticator/issues/detail?id=413

Same, invalid codes in new BQ Aquaris E5 FHD witch 4.4.2, this is a
critical problem.

[google-aut...@googlecode.com]

Comment #7 on issue 413 by christia...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same issue, always invalid codes in new Jiayu G4S 4.4.2.

Aditional info: When trying to sync Internal autenticator clock it Always
says that the clock hasn't been udjusted because it is already sychronized
with google servers.

[google-aut...@googlecode.com]

Comment #8 on issue 413 by steffen....@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same here on Acer Liquid E700 (4.4.2). Seems to be a Google Authenticator
issue as FreeOTP shows the right codes on the same device.

[google-aut...@googlecode.com]

Comment #9 on issue 413 by Maximili...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same one Acer Liquid E700..

[google-aut...@googlecode.com]

Comment #10 on issue 413 by pjjpa...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same issue for my Acer Liquid E700 on 4.4.2

[google-aut...@googlecode.com]

Comment #11 on issue 413 by islom.dj...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Use FreeOTP instead of Google Authenticator - it works perfect, even on
4.4.2!

[google-aut...@googlecode.com]

Comment #12 on issue 413 by richard....@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I have the same issue with a new Lenovo A8-50HV (A5500HV) Tablet and Google
Authenticator. Android 4.4.2 on this device. Authenticator v2.49. The code
generated is incorrect. For comparison I also have a Samsung GS3 running
Android 4.3, Authenticator v2.49. It generates the correct code.
Tried FreeOTP and it generates the correct code on the Lenovo on Android
v4.4.2.
File details a test code to use and images of Google Authenticator and
FreeOTP results attached.

Attachments:
Test Authenticator Code.doc 210 KB

[google-aut...@googlecode.com]

Comment #13 on issue 413 by miguel.a...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I have this issue too with a bq Aquaris 5HD, 4.4.2 andorid version.
Hope to see this fixed soon.

[google-aut...@googlecode.com]

Comment #14 on issue 413 by davide.m...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I have the same issue with a new Komu K5 and Google Authenticator. Android

4.4.2 on this device. Authenticator v2.49. The code generated is incorrect.

Tried FreeOTP and it generates same incorrect code, on same device Komu K5
Thank you

[google-aut...@googlecode.com]

Comment #15 on issue 413 by mrda...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

This link says Math.pow() is inaccurate
https://code.google.com/p/google-authenticator/issues/detail?id=396 I am
also using android version 4.4.2

[google-aut...@googlecode.com]

Comment #16 on issue 413 by Tiago.ra...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

same here on BQ Aquaris E5 with 4.4.2

[google-aut...@googlecode.com]

Comment #17 on issue 413 by Lajos.Po...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

My Android 4.4.3
All times are GMT+02:00 Central European Summer Time
My Windows:
UTC+01:00 Budapest, Daylight Saving Time ends: 26 October 2014

I think the +01:00 and +02:00 is diffenerent and the code is wrong.

If you wait until October, it'll be good.

[google-aut...@googlecode.com]

Comment #18 on issue 413 by JePossi...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I have the same problem with my phone that running android 4.4. I always
get the wrong code. I have tried Google Authenticator on android 4.0.4 and
it works flawlessly. From the comment above, it looks like the problem is
on Google Authenticator that don't support android 4.4+ or maybe because my
phone using mediatek as the chipset. I don't know exactly, it's just my
mere opinion. Then I tried FreeOTP, it works perfectly. I think the
developer should fix it immediately.

[google-aut...@googlecode.com]

Comment #19 on issue 413 by emiliano...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Google Authenticator on Android 4.4.2 doesn't work any more. I used FreeOTP
and it works perfectly!

[google-aut...@googlecode.com]

Comment #20 on issue 413 by oat...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same problem with THL T100s 4.4.2

[google-aut...@googlecode.com]

Comment #21 on issue 413 by drdug...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same here. Android 4.4.2 on an LG G3. Works perfectly on iPhone running
iOS 8. Ironic isn't it?

[google-aut...@googlecode.com]

Comment #22 on issue 413 by andrey...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same problem here. In Motorola D3 (XT920) with Android 4.1.2 JB worked
perfectly. Immediately after upgrading to KitKat version 4.4.2 the
generated codes by the app do not work anymore.

[google-aut...@googlecode.com]

Comment #23 on issue 413 by heiko.se...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

My Acer B1-711 tablet, running KitKat 4.4.2, is also affected by this bug.
All my other devices generate valid codes.

[google-aut...@googlecode.com]

Comment #24 on issue 413 by tumst...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Is any one looking at this issue..?
I still see it in NEW state, and many people (including me), have the same
problem, the codes generated by 4.2.2 is different from 4.4.2.

Codes from 4.2.2 works, means, codes from 4.4.2 is not valid obviously.

I tried adding for other account, from microsoft, the codes generated for
that secret key is also out of sync. Basically for any secret key, the
codes generated by Authenticator app is invalid.

[google-aut...@googlecode.com]

Comment #25 on issue 413 by tumst...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Temporary Solution.
Use Alternative App

https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp

It works

[google-aut...@googlecode.com]

Comment #26 on issue 413 by HLL...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Confirmed, also happens on Lenovo p780 4.4.2 (ROW S226 - OTA Update)

Tried FreeOTP, works; - Thanks #8.

Please escalate the issue.

[google-aut...@googlecode.com]

Comment #27 on issue 413 by stelios...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I can confirm as well. On Lenovo S820 with Android 4.4.2 the Authenticator
generates invalid codes. FreeOTP works fine.

[google-aut...@googlecode.com]

Comment #28 on issue 413 by blackama...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Confirm,Micromax canvas a120

[google-aut...@googlecode.com]

Comment #29 on issue 413 by emu...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

confirm on Acer Liquid e2, after long hour wondering what i have done
wrong :(

[google-aut...@googlecode.com]

Comment #30 on issue 413 by alofo...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same issue, time sync reported OK by authenticator app but codes not
working.
Attempted account reconfiguration and full opt-out and then opt-in again to
dual-factor.
- authenticator version 2.49
- Acer E380 EMEA_GEN1 running android 4.4.2 build
Acer_AV0K0_E380_1.018.00_EMEA_GEN1

[google-aut...@googlecode.com]

Comment #31 on issue 413 by woollyp...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Always worked on HTC wildfire and HTC wildfire S with android 2.2.1. Only
worked on Nexus 7 2012, android 4.1 and various version of cyanogenmod,
after I changed the time zone from GMT+0 London to GMT+0 Greenwich Mean
Time, sorry not 100% sure on the time zone, can't check since screen died,
but I had two options for GMT+0.

Now on UMI C1 with 4.4.2 no matter what I do, set time manually, time sync,
reinstall app, enter code, scan barcode it will not play ball.

Will try FreeOTP.

[google-aut...@googlecode.com]

Comment #32 on issue 413 by rpcrodr...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I have upgraded my motorola xt918 to android kitkat and Google
Authenticator not working anymore! I tried everything. Please, fix this
problem.

[google-aut...@googlecode.com]

Comment #33 on issue 413 by neco....@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Samsung Note 2 - A.4.3 - ok
myPhone Luna - A.4.4.2 - google auth. - not working, FreeOTP - ok
and attention!-> Samsung Note Pro 12 -> A.4.4.2 - google auth- works ok!

? WTF?

[google-aut...@googlecode.com]

Comment #34 on issue 413 by bau...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

it's confirm another time that all Mediatek chip used with android 4.4.2 is
impacted (mediatek rom based).

[google-aut...@googlecode.com]

Comment #35 on issue 413 by stef.ana...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Can confirm issue here Acer Liquid S1 4.4.2 version of OS.

[google-aut...@googlecode.com]

Comment #36 on issue 413 by darthdu...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

google autheticator app not working on thl t100s

[google-aut...@googlecode.com]

Comment #37 on issue 413 by darthdu...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

[google-aut...@googlecode.com]

Comment #38 on issue 413 by roel.app...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Confirm issue on Vodafone Smart 4 Power(A.4.4.2) google auth. - not
working, FreeOTP - ok

[google-aut...@googlecode.com]

Comment #39 on issue 413 by pawelek...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Also I want to confirm, that on 4.4.2 Google Auth is not working -
generating wrong codes.

[google-aut...@googlecode.com]

Comment #40 on issue 413 by foub...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

On Archos Oxygen 50c updated to 4.4.2 - Same Issue. FreeOTP ok.

[google-aut...@googlecode.com]

Comment #41 on issue 413 by rpcrodr...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I tested with anothe phone, with the same android version and it works. The
other phone has a different chipset (Qualcomm Snapdragon 200).

I read this somewhere and I confirm. The secret codes generated by phones
with Android Kitkat 4.4.2 with chipset MediaTek MT6575M Cortex-A9 (or
similar) doesn't work.

[google-aut...@googlecode.com]

Comment #42 on issue 413 by r...@unixindia.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

confirmed not working in LG L20. The chipset is Dual-core 1 GHz Cortex-A7
on 4.4.2

[google-aut...@googlecode.com]

Comment #43 on issue 413 by r...@unixindia.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Confirmed does not work on Mediatek MT6572M also under 4.4.2

[google-aut...@googlecode.com]

Comment #44 on issue 413 by bhas...@unixindia.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

confirmeed DOES NOT WORK on Mediatek MT6572M (Cortex-A7)
and the Redhat version workaround works !

Is this going to be fixed ?

[google-aut...@googlecode.com]

Comment #45 on issue 413 by kulshek...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Facing this problem on Lenovo S660 Android 4.4.2

[google-aut...@googlecode.com]

Comment #47 on issue 413 by chomp.ve...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

same problem in my motorola razr d3 XT920,I make hard reset in my phone
thinking if had some problem with upgrade. but didn't work. Please fixed it

[google-aut...@googlecode.com]

Comment #48 on issue 413 by Diana.Sa...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same issue, incorrect codes generating on my Samsung Galaxy S5, and the
time sync shows as correct. Someone needs to fix this ASAP!

[google-aut...@googlecode.com]

Comment #49 on issue 413 by bau...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

@Diana: The S5 clone? S7 with MediaTek MT6852 ? and android 4.4.2

[google-aut...@googlecode.com]

Comment #50 on issue 413 by chomp.ve...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

any date for the solution of the problem?

[google-aut...@googlecode.com]

Comment #51 on issue 413 by wagneri...@sedep.com.br: Different (out of

sync) secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

After upgrading my XT920 to Android to 4.4.2
I could not login to AWS due to problems with Google Authenticator :(

[google-aut...@googlecode.com]

Comment #52 on issue 413 by sorin.mi...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

same problem on 4.4.2. Spend hours till i read this post. Google sucks!

[google-aut...@googlecode.com]

Comment #53 on issue 413 by serh...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Quite an strange bug, not completely google's fault, however they should
try to solve it using their own Math pow implementation so it would run
without further problem on all devices.

My phone: Wiko GOA
Android version: 4.4.2
Kernel version: 3.4.67

Temporarily solution: FreeOTP

BTW: "+1 Me too!".

[google-aut...@googlecode.com]

Comment #54 on issue 413 by trulyw...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Same problem here, can't get the right code after updating to 4.4.2

[google-aut...@googlecode.com]

Comment #55 on issue 413 by boltg...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Sill not working, and FreeOTP did the job.

[google-aut...@googlecode.com]

Comment #56 on issue 413 by gabrielx...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Not working on my XT915 too. Android version 4.4.2. Google Authenticator
version 2.49.
Please fix this problem!

[google-aut...@googlecode.com]

Comment #57 on issue 413 by piche...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

Confirmed, also happens on Laude S800 4.4.2

FreeOTP, works

Please escalate the issue.

[google-aut...@googlecode.com]

Comment #58 on issue 413 by mymail.z...@gmail.com: Different (out of sync)

secret code for the same account on different smartphones (android)
https://code.google.com/p/google-authenticator/issues/detail?id=413

I upgraded my kingzone k1 turbo with MT6592 to 4.4.2, and google auth not
work anymore