> lose my gmail account and access to Google Authenticator Google Authenticator is not tied to your account. Unless you lose your phone at the same time (or ha

> lose my gmail account and access to Google Authenticator Google Authenticator is not tied to your account. Unless you lose your phone at the same time (or have remote wipe enabled and someone who gets your Google account wipes it), your Gmail account is not tied to access to Authenticator. You should also backup authenticator codes on paper in a safe place. > What we need is a single way to do login, MFA and security across every single site. This. U2F could be it, but even the vendors that implement it often implement it poorly (e.g. not allowing multiple tokens).