Roll20 uses cookies to improve your experience on our site. Cookies enable you to enjoy certain features, social sharing functionality, and tailor message and display ads to your interests on our site and others. They also help us understand how our site is being used. By continuing to use our site, you consent to our use of cookies. Update your cookie preferences .
×
Create a free account

Failure to Login on First Attempt

As the title suggests, my first attempt to login each new browser session fails, & sends me to the "you got your password or username wrong" page, at which time I reenter the info & it works. 
1691768589
keithcurtis
Forum Champion
Marketplace Creator
API Scripter
Hi Jordo! For a behavior like that, my first inclination would be to delete all cache and cookies.
Thanks for the response.  My browser is set up to do all of that automatically every time I shut it down, so that isn't the issue. 
1691772303
keithcurtis
Forum Champion
Marketplace Creator
API Scripter
Do you get the same issue when using a private browsing window?
It happens specifically after the "Cloudflare" window pops in with the "checking your connection" message, then sends me to the "your email or password was wrong" alternate sign in page, after which I can sign in with no issue. It doesn't happen otherwise or in any other circumstance, & the Cloudflare message pops up every time it fails. 
I would guess it has something to do with the "Cloudflare Tunnels" feature (or whatever it is called) that people are using to illegitimately access data & endpoint access through users of legitimate sites. 
Jordo J. V said: I would guess it has something to do with the "Cloudflare Tunnels" feature (or whatever it is called) that people are using to illegitimately access data & endpoint access through users of legitimate sites.  This has nothing to do with "Cloudflare Tunnels", which is a product to host a website without exposing your own IP address. As i understand it from another forum post: There was a DDOS attack. Roll20 uses Cloudflare to protect against such attacks - and then it was decided 'turn up the protection knob'. And now normal traffic is identified as a potential DDOS attack. And as always the good guys suffer more than the bad guys.
I'm not sure why Cloudflare would tell me my correct information is incorrect, only to then let me use the exact same information to sign in with no issue. That doesn't sound like the protocol for DDOS protection. That sounds like the opposite of the protocol for DDOS protection, though I'm not an expert.