alt Hacker NewsGood. E-mail based 2FA is bad, and they appear to support TOTP too as an option, as they should. Wish they supported U2F though.
Good. E-mail based 2FA is bad, and they appear to support TOTP too as an option, as they should. Wish they supported U2F though.
Why is email based 2fa bad but phone good? There are classes of issues you get through phone 2fa compared to email