3 ms·

+1 for pass-otp or keepasxc because the chain is strong as the weaker link (cause 2FA is generally badly implemented) and password/mail is reliable.