2FA is typically implemented by using an authenticator app that generates time based codes. Looking at DO's docs, they do this: https://docs.digitalocean.com/p

2FA is typically implemented by using an authenticator app that generates time based codes. Looking at DO's docs, they do this: https://docs.digitalocean.com/products/accounts/security/2fa/ https://docs.digitalocean.com/products/accounts/security/2fa... 2FA by sending an email is kindof strange. I wonder if that's the method of security they use if you don't actually have 2FA setup? p.s. For anybody reading this, DO docs talk of 2FA via SMS codes. Don't do that - it's generally considered insecure.