If you can access your from the same device as you are logging in from, it is not two-factor authentication. No, not even from a password vault.

Similarly if you can access SMS from your computer, an OTP sent to it is also not two-factor.

These may be more secure than a bare password, but they don't have the same effect and guarantees as .

Sign in to participate in the conversation

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!