Locked out of your Credit Karma account’s 2FA? No problem! Here’s how I can log into mine:

  1. Log in with my username and password.
  2. Try the 2FA challenge once and let it fail.
  3. Navigate to accounts.creditkarma.com

Ta-da! I’m in. I reported this a month ago but they haven’t acknowledged it as an issue yet. If I stumbled across this, you can bet the bad guys are already using it.