All I know is that I sleep a lot better that I have two-factor authentication turned on for gmail. I would leave gmail quickly if a good alternative had that.

All I know is that I sleep a lot better that I have two-factor authentication turned on for gmail. I would leave gmail quickly if a good alternative had that. Looking at the OP's recommendation of fastmail.fm, it seems to have multi-factor authentication: https://www.fastmail.fm/help/login_yubikey.html https://www.fastmail.fm/help/login_yubikey.html It appears to depend on a physical key that I'll have to carry around with me. Gmail's MFA relies on an app on my iPhone which is far more convenient and they have a backup way of getting into the account with a hand-typed key that is very long. Why is good web-based email MFA so hard to implement and why has Google been the only one to perfect it?