topic Re: Why are you STILL forcing the webapp to log out? in Arlo

Repeated forced login

Retired_Member — Fri, 06 Sep 2019 05:14:31 GMT

Why does the web portal now force me to log in every time I load it? This behavior started yesterday or the day before.

Re: Repeated forced login

jguerdat — Fri, 06 Sep 2019 13:12:15 GMT

I believe this is part of the 2FA (2 factor authentication) process, regardless of whether you have it enabled.

Re: Getting logged out of My Arlo

StephenB — Fri, 06 Sep 2019 17:35:29 GMT

I think this is related to the two factor authentication feature (even if you aren't using that feature).

The risk of allowing extended logins is that can let other people see your videos. That's particularly true if you log in on a public PC somewhere. More aggressive logouts help eliminate that threat.

But I think Arlo has overdone it a bit. The security in the web client doesn't need to be more burdensome than my bank/investment sites. At the very least, there should be a way for the user to have trusted client on specific PCs.

Re: Getting logged out of My Arlo

lordsparky — Fri, 06 Sep 2019 21:23:58 GMT

I believe this coincides with the split from Netgear. The new iPhone app works like the old app, but the desktop website--arlo.com--makes you log on every few minutes. No "Stay logged in" checkbox. I use a long complicated password and by the time I log into something else to get it and paste it into the fields the burglars have broken in and killed me. I will probably just have to look at everything on my small phone screen. So Stupid.

Re: Getting logged out of My Arlo

Luddy — Fri, 06 Sep 2019 21:32:05 GMT

And add 2 factor auth via push notifications and you have to do that EVERY time too even when from the same PC. They've ceased to amaze me any more.

Re: Repeated forced login

Retired_Member — Fri, 06 Sep 2019 22:00:26 GMT

>I believe this is part of the 2FA (2 factor authentication) process, regardless of whether you have it enabled.

No, I don't believe it is. This isn't a 2nd sign-on. It's the initial email/pwd sign-on.

The webpage changed a couple of days ago when this behavior started. They are no longer maintaining the credentials.

Re: Repeated forced login

parsrgood — Fri, 06 Sep 2019 22:36:40 GMT

@ macaahi. You are correct. This has nothing to do with two factor authentication. Arlo has once again made some changes which leaves it's camera owners up in arms as what to do. They have changed their log in URL. It would have been easy for them to redirect the URL to their new web address but they didn't. Try http:my.arlo.com/#/home. That should let you sign in. It's what worked for me 2 days ago. Hope it works for you.

Re: Repeated forced login

Retired_Member — Fri, 06 Sep 2019 23:00:46 GMT

@parsrgood

Re: Repeated forced login

StephenB — Fri, 06 Sep 2019 23:06:05 GMT

@Retired_Member wrote:

>I believe this is part of the 2FA (2 factor authentication) process, regardless of whether you have it enabled.

No, I don't believe it is. This isn't a 2nd sign-on. It's the initial email/pwd sign-on.

The webpage changed a couple of days ago when this behavior started. They are no longer maintaining the credentials.

Every time you refresh the browser page you have to log in again, which is a pain (and in the case of Edge, it adds a couple more hoops to jump through when enabling Flash).

I believe they did that to increase the security effectiveness of 2FA. I agree it isn't 2FA itself (the repeated logins are needed whether 2FA is enabled or not).

And as I said earlier I think they overdid it (making it more burdensome than necessary).

Re: Repeated forced login

Gumby-Arlo — Sat, 07 Sep 2019 09:23:11 GMT

Agreed it has becomed a real pain to use Arlo.

Following.

Re: Getting logged out of My Arlo

jguerdat — Sun, 08 Sep 2019 16:50:14 GMT

I think the issue on the web is the new 2FA feature, whether you use it or not. The app continues to connect as before.

Re: Getting logged out of My Arlo

StephenB — Sun, 08 Sep 2019 18:02:22 GMT

@Kaskillah wrote:

Why is ARLO making it so difficult?

I agree they've made it harder than necessary, and hope they reduce the log outs.

Re: Getting logged out of My Arlo

StephenB — Sun, 08 Sep 2019 18:22:24 GMT

@Kaskillah wrote:

Maybe they want to limit the bandwith on their servers by cutting off connected users.

No, that doesn't make any sense. It isn't using any bandwidth unless the user is actively doing something.

@Kaskillah wrote:

It does nothing but anger users.

I agree with that part.

Re: Getting logged out of My Arlo

bvoswego — Mon, 09 Sep 2019 21:10:25 GMT

I also am logged out which doesn't bother me as much as I then need to type in my email address each time. This started recently. Before, all it did was ask for the PW. Trying to determine if this is a window 10 thing or Arlo

Re: Getting logged out of My Arlo

Retired_Member — Mon, 09 Sep 2019 21:50:43 GMT

@bvoswego

It's Arlo. They also made several other webpage changes at the same time.

I'm just keeping the page open in the browser now instead of loading it when I need it. It's stupid to have to do that, but whatever. Arlo isn't known for making smart decisions. As long as I interact with the page every 1/2 hour or so, it's staying logged in. (At least that's my experience so far.)

Re: Getting logged out of My Arlo

StephenB — Tue, 10 Sep 2019 00:34:44 GMT

@Retired_Member wrote:

As long as I interact with the page every 1/2 hour or so, it's staying logged in. (At least that's my experience so far.)

If you refresh the page, I think you will be asked to log again.

Re: Getting logged out of My Arlo

Gumby-Arlo — Tue, 10 Sep 2019 02:43:51 GMT

I agree it's Arlo. fwiw - I am using Win7

Re: Getting logged out of My Arlo

parsrgood — Tue, 10 Sep 2019 16:09:23 GMT

Just a heads up. I've been hearing two factor authorization mentioned several times in this thread. This log in mess is not due to TFA. Two factor authorization requires a code sent to you via email or message,facial recognition, thumb print etc. in addition to your user name/email and password. Arlo log in requires email and password only. This newest attempt to irritate their customers is the result of them transitioning from netgear to arlo which is supposed to be complete by the end of the month. All of these past issues could have been avoided if Arlo management would have told their engineers back in April "IF IT AIN'T BROKE, DON'T FIX IT"

Re: Getting logged out of My Arlo

StephenB — Tue, 10 Sep 2019 16:18:16 GMT

@parsrgood wrote:

Just a heads up. I've been hearing two factor authorization mentioned several times in this thread. This log in mess is not due to TFA. Two factor authorization requires a code sent to you via email ...

Yeah, I know how it works.

Technically it's not related. However, Arlo did uplift the security on the web client as part of their TFA implementation - and they rolled it all out as a package when they launched the new app. That uplift includes the more aggressive forced logouts (even when simply refreshing a page).

As I've said in other posts, in my opinion they went too far. There's no reason why I should have to do more logins with Arlo than I need to do with my bank.

Don't stay logged in to web app since latest update

BPMayo7 — Fri, 13 Sep 2019 14:18:16 GMT

I can't stay logged into the web app since the latest update. Can't get help chat to initiate since all equipment selections on the chat start screen pull down menu do not seem to be supported and you have to choose a piece of equipment to continue, and to top it all off the help phone number requires a fee if you purchased the product(s) more than 90 days ago? I also can't log in to the support function to send an email with the same credentials I use to log into the web app (yes it works just have to do it every time and what if you are in the middle of an "emergency" and want to check cameras? Just tell us where to send the body I guess?) If I knew customer service was going to be this abysmal I would have defintely bought a different product even at additional cost. Anyone else having these problems?