The new-password entry of a navigation challenge: Instagram asks the person
to choose a new password, typically after a login-review or a
contact-point-change warning led here. Instagram names the step
set_new_password; the step's step_data carries only the two empty password
fields (new_password1, new_password2).
Reached only as an interruption of a request (OpenChallenge(error)), and
usually as the next step of the same challenge; it has no back and is no
step of a trail.
Its one action, submitNewPassword(password), encrypts the password with the
session's password-encryption key (fetching the key first when the session
holds none) and sends it to the step's challenge action unchanged, both
fields carrying the same encrypted value, then continues into the next step —
the challenge's end when the answer is a close. A password the server calls
too easy is the existing typed
IgChallengeNavigationSetNewPasswordTooEasyError, carrying the server's
text. The action runs only while this screen is on top; the interrupted
action is never retried.
Ships with screens.challenge.set-new-password.jpg, the screen as the old
class was observed on a test account.
Unverified by recording. No recording of the Android 451 app on this step
exists: the answer is the challenge module's own sample and its earlier live
runs. A recording of the Android app on the challenge's new-password entry
would settle the screen's text and the password-encryption request.
The new-password entry of a navigation challenge: Instagram asks the person to choose a new password, typically after a login-review or a contact-point-change warning led here. Instagram names the step
set_new_password; the step'sstep_datacarries only the two empty password fields (new_password1,new_password2).Reached only as an interruption of a request (
OpenChallenge(error)), and usually as the next step of the same challenge; it has nobackand is no step of a trail.Its one action,
submitNewPassword(password), encrypts the password with the session's password-encryption key (fetching the key first when the session holds none) and sends it to the step's challenge action unchanged, both fields carrying the same encrypted value, then continues into the next step — the challenge's end when the answer is a close. A password the server calls too easy is the existing typedIgChallengeNavigationSetNewPasswordTooEasyError, carrying the server's text. The action runs only while this screen is on top; the interrupted action is never retried.Ships with
screens.challenge.set-new-password.jpg, the screen as the old class was observed on a test account.Unverified by recording. No recording of the Android 451 app on this step exists: the answer is the challenge module's own sample and its earlier live runs. A recording of the Android app on the challenge's new-password entry would settle the screen's text and the password-encryption request.