> Tokens are a problem too (a yubikey might be a solution). Not the way they implement things. When they started forcing people to use 2FA, google also made a

> Tokens are a problem too (a yubikey might be a solution). Not the way they implement things. When they started forcing people to use 2FA, google also made a titan keys giveaway. But you set it up on your account, generate a token and that's it. Identical situation on github. Setup 2FA with an hardware key, then generate a token and never use the hardware key ever again.