Sounds like what Canada Revenue Agency has up now as well, their 2FA setup gives you a 5x5 grid of random 3-letter combos, and when logging in they'll ask you f

Sounds like what Canada Revenue Agency has up now as well, their 2FA setup gives you a 5x5 grid of random 3-letter combos, and when logging in they'll ask you for a specific three of them. Honestly it's a PITA (I need to keep said PDF vaguely handy, and it's stored less securely than in my password manager).