Blockchain.info wallet bug allows to change the first password without secondary

[lexxus]

Maybe this has been already found and discussed, but...

I think I found a bug in Blockchain.info wallet. I reported this several days ago using their customer support system but got no reply (even confirmation that my request was accepted).

If you enable a second password in your wallet, you can still change the main password without entering the second one. When you try to change your main password you are asked for a secondary but you can just click "Cancel" and continue: you will see a standard "Confirm Password Change" and if you confirm the main password will be changed. As simple as that.

Edit: It's even worse, you can put anything as a secondary password, you can still proceed with changing the main password. I don't get it. Maybe it is as planned?

[1715173613]

1715173613

[1715173613]

1715173613

[1715173613]

1715173613

[lexxus]

So can anyone confirm this? Is it a bug or a feature? Is there anyway to get it fixed as it's critical if you want to use it as  "monitoring only" wallet for several users?

[bowen151]

Im concerned with the fact that the 2FA by way of text only kicks in half of the time. Allowing me 1FA access sometimes.

[lexxus]

Im concerned with the fact that the 2FA by way of text only kicks in half of the time. Allowing me 1FA access sometimes.

At what point?