• 0 Posts
  • 4 Comments
Joined 11 months ago
cake
Cake day: August 4th, 2023

help-circle


  • The security level should be the user’s choice. Maybe I don’t care if my neopets account is hacked. Maybe the 2fa offered actually decreases security, like the SMS 2FA required by my 401k account that can be used as the sole recovery factor, bypassing the password. Maybe I’m accessing from a system configuration that makes 2fa really annoying, like a build system running inside a fresh VM on every run.

    The service doesn’t have the context necessary to know when 2FA is warranted.