I setup that two-step auth. some time ago and recently needed to login with my browser, instead of the galaxy client, and got to the 2nd security measure where I request a 4 digit number to my email. After it claimed it was sent I checked my email to get the numbers so I could complete the login. I waited.... then I waited some more... then it was 10 minutes later so I assumed it just failed so I pressed the [Resend] button. Pressed it once and then checked email again. Waited 15+ minutes this time while I went to go do something else. Nothing.

So after 30 minutes I pressed Resend Code again ( a third time) and waited another 15 minutes. Nolthing after 45 minutes so I just backed out, and started completely over entering credentials and requesting the Auth Code for 2nd step. This time I pressed it about 20 to 30 times, surely 1: 25~ will accept and it did! Within a minute or two I got my Auth Code, used it, and it worked.

So after a little over an hour I got in, which should take under 10 seconds [because: Internet]. Only one small problem now. Every 30 to 40 minutes my email receives an email with a 4 digit security code now, seems pressing Resend Code does work but the server must be overloaded and all emails are queued up for day. Great job.

Seems I have 20+ Authentication Codes coming over the next day or so. lol

Yes, not everything happens immediately all the time!

I think I see what's going on, it's Safer Internet Day ( https://saferinternetday.us/ ) so if ya can't login doing the process correctly then no one can. Keeps our accounts safe by letting no one in, legit or otherwise. Good move.

There's a difference between "not happening immediately" and "Well, looks like I'm not going to download and play any games today."

The same happened to me when I got my new laptop. I went to gog.com, hit the log in button and was greeted by 2FA. I went to my mail and... yeah... well... end of story. I hit the resend button two or three times but nothing happened. I got a few mails with auth codes later, but... that's not exactly how it should work.

I didn't write support and I definitely didn't start a thread in the forums, because I know "not everything happens immediately all the time". But it made me want to turn off 2FA. There was kind of a conflict between account security (sorry, but I don't really trust GOG and their Top Men™ with that) and getting into your own account. But since this was at a time where a few people lost access to their accounts (still logged in but they could see that someone changed the e-mail), I decided to go for account security. Better to wait half a day to log in than to spend a few days to get your account back.

Anyway... 2FA shouldn't take a few hours. That's something that simply HAS to work. Generating and sending out the codes is a 100% internal process. So as long as your website's running, 2FA should work, too.

Exactly, I'm fine with 5 minutes, even 10 minutes, had many sites take that long since I been on networks in the 80's to now... but 1 hour or more? Unacceptable. AND all my Resend presses were registered and I am still geting emails even now. Have 17 now and there are probably 15-20 more coming over the next day. Their system is totaled ****ed.

And your a 100% sure that it’s not your email server being slowed? Maybe redirected somewhere. Things happen, it’s sometimes slow. I have had it both was too, immediate link, nothing for an hour. It even happens with other accounts. There is nothing we in the forum can do, contact support and work through a trace back if you can’t wait or it’s taking an inordinate amount of time.

Yes, positive.

--

This is starting to feel like I'm debating one of those flat-earthers on youtube.

So let me get this straight: when you login with your credentials (username/email and password) then are greeted with 2FA and the code/link/etc takes one hour or even longer you think to yourself "well, this normal I accept that it could take a few hours, or even longer, to log into my account?"

I understand you have the overwhelming need to be "the most correct" thread-ender here, I encounter your type all the time over the last few dacades, but you do understand there is 0 ways of knowing if the 2FA process is working, correct? I gave it the benefit of the doubt and did wait. I factored it against how long it takes against most company sites that have a 2FA also: which is 5 seconds to 20 seconds for the **vast majority** of them as well against the sites that do actaully take a long time of 5, 10, or even 15 minutes.

And being you must know about my gmail account health: yes, it is working just fine. When I checked for 2FA code I received several emails just no GoG Auth Code *for one hour* and then I got another one about 2 hours later, then i got 2 more at once two and half hours later, then I got one more 3 hours later, [...] and now several hours later I'm 20+.


"Boy, that *gmail* is really screwing up huh?"

People are asking because, well, for example I get that 2FA code to my email within seconds, every time.

What do you suggest is different between you and me? Why it is speedy for me but takes ages for you? A conspiracy?

I know for a fact that emails can get stuck to some filter somewhere, and then some employee (who takes care of that filter or email server) happens to notice them and is like "hmm, maybe these are legit after all" and releases the emails MANUALLY, one by one, at which point they go to their intended target.

I wouldn't be surprised at all that is what has happened in e.g. your case. Or something similar.

Why did we ever let the Eternal September begin... all is lost.

I mean At the very least they could switch to a system that isn't from antiquity.

Seriously???? Not sure if that's aimed at Goggers, or Gog's site, or both, but though your frustration is understandable, the tone of some of your replies to those asking valid questions - Nightcraw1er.488 and Timppu for instance- is quite uncalled for. Patience, troubleshooting and process of elimination are known to work too.

There was nothing outrageous at all you being asked about potential issues with your mail provider. Mail taking its time, even a long time to reach its intended target is not unheard of, far from it. Already mentioned are filters, also a very valid point when it comes to some mail getting trough but other isn't. And this can also have to do with whatever mail provider you are using. In that respect, the 'free' ones do have their nasty sides -don't know if you're a free or paying user of Gmail and don't care, but this I know first hand so can think of one for sure who deliberately withheld mails from GOG, just like that one day all of a sudden without warning. Something Support was aware of and trying to get sorted out.

As far as saying 2FA mails were also being withheld? I didn't stick around that -let alone any other 'free'- provider long enough to find out, but I sure wouldn't put it past them. As for delays in general? Granted those don't often happen but there are occasions when it's on the slow side.

Point is that in theory, what should be almost instantaneous isn't always so in practice, for things do go wrong for whatever reason, be it because of tech issues on a website -here for Gog you could have had outgoing emails queued for a bit too long, or mail servers delivering issues. And let's not forget browser issues, that too far from being unheard of. Not always the smooth sailing we'd like it to be and so you had delays then got flooded with 2FA notifications due to multiple requests... As annoying as this may be, at least end result that matters is that you are not locked out of your account.

2FA is a universal mystery from my point of view. Sometimes it works immediately and sometimes i'm asking for it many many times over the course of a day, this site and others. Never seems to go over a day as far as I can remember. The only time I worry about it though is with my bank. When that doesn't show up immediately, i'm constantly re-asking for it till it appears. Like I said its a mystery and I don't ever understand the reason when it gets held up.

yes. this would be much better.
not that i've had issues with the email (thankfully / luckily) but i'd much rather have it use an authenticator app to generate a passkey than bother with the email