3 ms·
What's the actual method that can be easily deployed at scale then?
What's the actual method that can be easily deployed at scale then?
I'd argue that there isn't one: you have to offer multiple choices. Auth through any TOTP app, Yubi key, pre-generated codes, mailing a physical code generator, etc.
Email + SMS + generic time-based OTP seems quite enough for imho