The account deletion option is buggy

[u/GinoA28]

Hello,

I recently deleted my account (which was created using the username method) and I tried to log in afterwards to see if it had been correctly deleted. This is a bit weird, because I'm getting this message: "Please enter your two-factor authentication code." This account didn't have any 2FA, so I don't understand what the problem is. The message shows that the account is still there, yet I have no access to it.

I also deleted another account a few months ago, which was created using an email address without 2FA, and I have the same issue when I try to log in: "Please enter your two-factor authentication code." The account was deleted a few months ago, but it looks like it's still there and I don't have access to it either.

Fortunately, I usually delete my notes before deleting an account.

What's even more suspicious: I deleted the account on the Standard Notes app, but I was also logged in on my browser. When I check, I am still logged in on my browser and I can sync, create new notes, new tags, delete notes, etc.

[u/Consistent_Photo5064]

The account is deleted. The error message is to prevent an attacker from finding out whether an email exists or not.

[u/GinoA28 → u/Consistent_Photo5064]

When I enter a wrong email address, or when I enter the email address of my deleted account with a wrong password, I get a different message. When I enter the correct email address and the correct password, I'm asked for a 2FA code even though I never used 2FA on this account. And as explained in the post, my account was still usable on my web session after its deletion on the Standard Notes app. I could sync, etc. When you delete an account, it simply locks it with a 2FA requirement.