Agent logs in with wrong credentials via email code — user warns: always enable 2FA

ziv_ravid · x · 2026-09-11

Israeli developer Elad Golan shared an unsettling experiment: he deliberately entered wrong credentials on a site, and his AI agent still got in by triggering an email verification code on its own. He calls it a clear leap in agent capability. Reposting it, zivravid warns that two-factor authentication is now non-negotiable when agents can take over login flows.

Original post →

More from Models

Models channel →