Issue login into ha using a private (Pangolin) tunnel with TOTP 2fa

chichi1967 · December 12, 2025, 10:55am

Hi,
It is not possible to login through a private tunnel using TOTP 2fa (in my case with Pangolin). After leaving the app to copy the TOTP I have to start over with the username/password entry - is there a chance to keep this information when changing the app, or is this an iOS security feature.
In addition I would appreciate a significantly higher timeout until the disconnect message appears - it is not even possible to enter the username when it is an email address - took some time to figure out that I can use X on the top right to continue.

bgoncal · December 16, 2025, 8:37pm

github.com/home-assistant/iOS

Remote connection problems? Check this

opened 09:07AM - 29 Apr 25 UTC

bgoncal

connection message

## Supported Remote Connection Configurations (iOS App) The iOS app currently s…upports the following remote connection configurations: - **Home Assistant Cloud** - **Exposing your local IP to the internet** (e.g., DuckDNS or any other DDNS) - **VPN**\* \* _VPN support depends on how it is configured. For example, background operations such as Siri Shortcuts or widgets displaying states will fail if the VPN is not active when triggered._ --- ## Important Notes The iOS app does **not guarantee full functionality** when using tunneling services like **Cloudflare**. While it may work in many cases, the app cannot account for errors caused by security rules or restrictions set by you or by Cloudflare itself. --- ## Unsupported Scenarios The app **will not work** in the following scenarios: - Any form of secondary authentication between the remote connection and Home Assistant (e.g., Google login, PIN code) - Remote connections with **location-based or unpredictable access restrictions** - Servers using **self-signed SSL certificates** --- ## Why Certain Scenarios Aren’t Supported Please understand that some scenarios above are unsupported not out of unwillingness, but due to the **added complexity required to maintain them**. The iOS app is more than just a frontend—it performs many background operations. Each additional authentication layer significantly increases development and maintenance effort, and at the moment, we do not have the bandwidth to support all edge cases.