2FA is completely broken.

[michaele]

2FA technically works. But first it happens constantly or every few days even for this forum. I have even selected to not ask for 2FA on this device and it still asks for it.

But that is not why it is broken. The real major problem is that it show up and stays on every single device. I sigh in on one and enter the code and then it asks, possibly after a while, like an hour if I just signed it. I just used it for 2FA and it asks if I just signed in. Not done yet.

But then I check my other Samsung phones, yes I have several, and every single one asks if I signed in and even gives the exact same code and then the exact same did you just sign in message. This could be hours after the actual sign in, especially if the phone or tablet was off.

So if a tablet at home was off and was turned on it would instantly give the Sign in Prompts and codes every singe time. And if I or anybody says No at any point it locks the account and I have to change the password and re-login on every single device.

I don't want 2FA at all, but I definitely don't want devices at home or ones stared up to constantly give login prompts. I have to know that I can never say no and make sure everyone in the family knows to never say No, making this check not only useless, but a gigantic pain. Is there a way around this constant nagging on every single device?

[Neo001]

It is a security feature, in case someone accessed your account without your knowledge. I agree though that it is can be a nuisance at times. Instead an email would suffice may be when logged in from an unknown device or IP address.

One way to not get the codes on every other device is to remove those devices from your Samsung Account as trusted devices and keep just one - your primary device to receive codes.

[michaele]

I don't think there is a way to remove a trusted device without logging out of my account, Is there? I still want the devices connected and fully functional, just not show the prompt.

It is not even a notification I can disable, it just shows up on the screen interrupting anything anyone may be doing.

It also does not address the biggest security flaw. It comes up on any device that was off or offline as soon as it is on and connected, even if hours or days after the login. Which means that I have no choice but to say YES anytime I see the prompt, making it completely useless.

I am trying to find what app or process is responsible for the prompt so I can disable it and only enable it if I need it. Thank you.

[michaele · Accepted solution]

I finally found a reasonable solution.

For older devices, the notification was by the Samsung Experience Service and it was easy to disable it. I don't what it is for, but the devices work perfectly without it.

Newer device are harder as it comes from Samsung Account which cannot be disabled and the notifications cannot be stopped (grayed out).

After some searching I finally found the name. com.osp.app.signin

To disable I had to use adb shell commands to just disable it, which removed the Samsung account, but such that if I enable it, it would be fully functional again which is exactly what I need.

The full command was: 

adb shell pm disable-user --user 0 com.osp.app.signin

I logged in a few times and no prompts on devices I don't want to get them. It would be nice if Samsung would allow this, but this will work for now. Thank you.