3 ms·

First step is to understand your data and why or why not it might be important to hackers. Then base your implementation of 2FA around that.