SendGrid 2FA Issue Locked Access to More Than 50 Accounts for 36 Hours

· Original article ↗

Summary

An agency says a SendGrid payment-method verification hold on one account locked more than 50 accounts tied to the same phone number for 36 hours. It shares recovery steps and ways to reduce the risk of another lockout.

Key points

  • The agency says it lost access to more than 50 SendGrid accounts, including its corporate account, for 36 hours.
  • According to SendGrid, a payment-method verification hold on one account locked every account associated with the same phone number.
  • The agency says it received no email notice about the issue and learned the reported cause after posting publicly.
  • For recovery, the article advises contacting SendGrid Support; accounts using Twilio Unified Login manage 2FA in the Twilio Console.
  • To reduce single points of failure, it recommends separate phone numbers, multiple people with their own 2FA, Authy backups where supported, and accessible recovery information.
  • It also recommends keeping billing details current and asking support whether a billing or verification hold affects accounts tied to the same number.

Article Details

Topic
A SendGrid two-factor authentication lockout affected more than 50 managed client accounts after a payment-method verification hold on one account propagated to accounts sharing a phone number; the article describes recovery and prevention measures.

Vendors

Products

Related Articles