I haven’t logged in to my heroku account over the last 3 to 5 years.
When I tried today, my password did work so I used the “forgot your password” link. When I reset the password and tried to log in I was asked to verify my account with an Authenticator code - which I never had.
How do I log in?
Related
I am trying to login into my heroku account but that fails with
Couldn't find that user.
I have already reset my password and tried logging in from different browsers.
How do I associate a QR Code from my Heroku accounts with my android Authentication App being that I am locked out of my account (Catch 22).
It's been a while since I last logged into Heroku and now trying to sign-on,the process is asking for Verification Code from my Authentication App. However, I no longer have the association between the Heroku QR Code and my Authentication App. Everything I do to try in resolve (email support, make a admin request, get to admin settings/QR Code, etc.) requires that I log in first.
When I try to log in on git bash it says "heroku: Press any key to open up the browser to login or q to exit:". I am pressing it, but it's stuck here. It wont open browser for login.
Looks like there is an incident with heroku login! Facing the same issue. Cannot login via the dashboard too.
Have you reset your password yet? They just force reset all passwords that hadn't been updated since a recent breech occurred. I was unable to login this morning and found all my sessions had expired. Once I did the password reset I was able to login again as normal.
Details
Salesforce-owned subsidiary Heroku on Thursday acknowledged that the
theft of GitHub integration OAuth tokens further involved unauthorized
access to an internal customer database.
The company, in an updated notification, revealed that a compromised
token was abused to breach the database and "exfiltrate the hashed and
salted passwords for customers' user accounts."
As a consequence, Salesforce said it's resetting all Heroku user
passwords and ensuring that potentially affected credentials are
refreshed. It also emphasized that internal Heroku credentials were
rotated and extra detections have been put in place.
Official: https://status.heroku.com/incidents/2413
Press: https://thehackernews.com/2022/05/heroku-forces-user-password-resets.html
I am trying to login into my heroku account but that fails with There was a problem with your login.
I have already reset my password and tried logging in from four different browsers on three different machines, to no avail.
I would raise a ticket at the heroku helpdesk but that is not possible without login. Any idea how to proceed on this? I haven't found a traditional hotline to call either...
Heroku experienced a major security incident last month and further determined that an "attack agent" exfiltrated hashed passwords. Because of this incident, Heroku reset all user passwords on May 4.
From the incident page:
Salesforce is ensuring all Heroku user passwords are reset and potentially affected credentials are refreshed. We have rotated internal Heroku credentials and put additional detections in place.
For now, a password reset to something other than your last password is not a bad idea.
Resetting my password worked for me
I am logged in to my dashboard with no problems.
Whenever I attempt to download a module or sign into the marketplace itself I get the following error:
That username/password combination is incorrect.
I have logged out and back in.... I have changed my password... I have requested a forgotten password 'reset'.
If I request a password reset while still logged in to my dashboard, all it does is take me to the dashboard proving I'm logged in just fine!