I usually point people to Authy. Nice app and alternatives are available of course. But more importantly they provide nice guides on how to set up 2FA for vario

I usually point people to Authy. Nice app and alternatives are available of course. But more importantly they provide nice guides on how to set up 2FA for various websites. Including Google/gmail: https://authy.com/guides/googleandgmail/ https://authy.com/guides/googleandgmail/ Even so, non technical people get very confused by this stuff. As the CTO, I enforce 2FA for all of our stuff. But it continues to be a support headache when we have new people joining. I'd love for this to be solved in a more user friendly & standardized way. So, I can understand why Google moved away from TOTP as the main way to do 2FA. It probably caused a lot of support overhead for them. Hardware tokens have the same issue. Nice for techies but too hard to deal with for normal people.