The first step of the AGOV registration process is to provide your email address and enter a verification code to validate the address. My problem was that I couldn’t even enter this code!

To set the context, the form to enter the verification code is split into 6 boxes (one per digit). The first weird thing was that every time I typed a digit, the focus wouldn’t automatically jump to the next box. Instead, the current box would accumulate more digits and highlight them in red, indicating an error.

At first, I thought that this was just a minor UI bug, and that I could manually jump to the next box after each digit. However, this didn’t work and the page would always display a “field required” error at the end, even when I carefully filled one digit per box. Strange.

I tried looking at the DOM in the developer tools to see if there was a form value I could manually adjust, but nothing obvious stood out. No error message was logged either in the web console. Using a different email address, or even a fake one ^{like [email protected] didn’t make any difference.}

Given that I was browsing the web with Firefox on Linux, I thought that maybe this combination was unsupported or failing a CAPTCHA. This would be unlikely – I barely encounter any website broken specifically on Firefox or Linux these days – but not impossible. Indeed, the registration page connects to eu-api.friendlycaptcha.eu just before the verification code form appears. And the official AGOV documentation only mentions Windows and macOS as supported operating systems, even though a different page about security keys states that Linux and Firefox are supported.

To rule this out, I ended up trying 6 combinations of browsers and operating systems: Firefox, Chromium and Chrome on Linux; Firefox, Safari and Chrome on macOS. All of them showed the same error!

At this point I thought it’d make sense to contact the official support. The AGOV website has many help sections, but unfortunately, this didn’t lead me very far because the only way to contact support is via a web form… that starts by sending a verification code to your email! The exact same form I couldn’t pass.

And yes, the FAQ explicitly mentions that this form is the only way to contact support (emphasis mine).

Support for participating authorities is provided by second-level support during office hours exclusively through the creation of tickets online.

The impressum also lists the physical postal address of the Swiss Federal Chancellery, who are likely not the ones directly developing the website anyway. There are no other contact details: no email, no phone number. Alternatively, one can in principle write a comment to “share feedback on AGOV: praise, criticism, requests”, but that again requires an AGOV or equivalent account to log in. A true chicken and egg problem!

I also looked at the online reviews of the AGOV Access Android app, which is currently rated 1.4 stars – by far the worst of any app I’m using. Unfortunately, nobody mentioned an issue similar to mine on these Google Play store comments. Interestingly, there were many comments about support for GrapheneOS (a private and secure mobile OS derived from Android) and the official FAQ now even has an entry about it (emphasis mine)!

The AGOV access App does not work on GrapheneOS because the hardening framework, which protects the AGOV access App against unauthorized manipulation, is not compatible with GrapheneOS. The Federal Chancellery has tasked the supplier with ensuring compatibility.

It sounds promising, but for now you can only register/login with a second-factor device that’s either a smartphone with vanilla iOS or Android, or a security key (good that it’s an option!). Of course, after you pass email verification.

Asking around

...
var Pc = o(3980),
  eh = o(4572),
  wa = o(9974),
  El = o(2326),
  Tp = o(6450),
  th = o(1203),
  Ld = o(9326);
function Yl(...M) {
  const m = (0, Ld.ms)(M);
  return m
    ? (0, th.F)(Yl(...M), (0, Tp.I)(m))
    : (0, wa.N)((I, _) => {
        (0, eh.P)([I, ...(0, El.K)(M)])(_);
      });
}
...

get errorMessage() {
  return this.translateService.instant(
    this.emailControl.errors?.required
      ? "GENERAL.text.fieldRequired"
      : this.emailControl.errors?.maxlength?.actualLength > ht.Z.EMAIL_MAX_LENGTH
        ? "GENERAL.text.inputTooLong"
        : "GENERAL.text.emailAddressError",
  );
}

onEmailVerification() {
  var _ = this;
  return (0, ve.A)(function* () {
    ((_.showResendSuccessfulBanner = !1),
      _.verificationCode
        ? _.verificationCode.length === _.verificationCodeLength
          ? (_.statusCode.set(""),
            (_.isLoading = !0),
            yield (0, Qt.s)(
              _.registrationService.emailVerification(_.verificationCode, _.userEmail),
            )
              .then((S) => {
                "VALID" === S.status
                  ? _.onEmailVerificationSuccess()
                  : ((_.showCodeValidation = !0), _.statusCode.set(S.status ?? "WRONG"));
              })
              .catch(() => {
                (_.statusCode.set("WRONG"), (_.showCodeValidation = !0));
              }),
            (_.isLoading = !1))
          : (_.statusCode.set("WRONG"), (_.showCodeValidation = !0))
        : (_.statusCode.set("REQUIRED"), (_.showCodeValidation = !0)),
      _.changeDetectorRef.detectChanges());
  })();
}

  verificationCodeEntered(_, S) {
    if ("Shift" === this.lastKeyPressed) return;
    switch (S.key) {
      case "Control":
      case "Meta":
      case "Shift":
      case "v":
      case "r":
        return;
      case "Enter":
        return (S.preventDefault(), void this.emailVerificationCallback());
      case "Backspace":
        return (this.setCode(_, "", "backward"), void S.preventDefault());
      case "ArrowLeft":
      case "ArrowDown":
        return void this.goBackward(_);
      case "ArrowUp":
      case "ArrowRight":
      case "Tab":
        return void (_ !== this.codeLength - 1 && (this.goForward(_), S.preventDefault()));
    }
    S.preventDefault();
    const O = Number(S.key);
    isNaN(O) ? (this.getInput(_).value = "") : this.setCode(_, String(O));
  }