3 ms·

2FA has been in place for years through email but this new requirement forces a phone.

• ceejayoz 5mo ago
  Good. E-mail based 2FA is bad, and they appear to support TOTP too as an option, as they should. Wish they supported U2F though.
  • ipaddr 5mo ago
    Why is email based 2fa bad but phone good? There are classes of issues you get through phone 2fa compared to email
    • ceejayoz 5mo ago
      Typically, you can also reset password via email, so it's really only one factor. Compromised email = compromised server.