If it's not something you can get it back by demanding it in real life you shouldn't put 2FA on it. A bank account will be given back for that reason. Accounts online are unrecoverable that way. Lemmy's 2FA was so bad that many people lost their accounts using it.

Things that I have 2FA for for some reason:

• my abandoned Ubisoft account which holds two free games and doesn’t have any personal details about me

Things I don’t have 2FA for, although I’d probably prefer if I could have:

• my bank account

This, but specifically because of Microsoft Authenticator. I hate this app so damn much. [I'm forced to use it] not with TOTP tokens, but push-notification based ones which arrive only sometimes and are slow. And then it's mocking me saying "pull to refresh if you don't see a notification", but there is no pull to refresh feature. Oh and Microsoft Azure Portal? It asks you to authenticate twice in a row, just to be sure. Burn burn burn

I would rather have 2fa than the magic link email bullshit. I am so fucking tired of sites assuming I don't want to use a simple username and password, and I clearly want to have to wait on email delivery to be able to access my account instead of JUST ENTERING MY GODS DAMNED CREDENTIALS.

also not everything needs email

just username + password is enough usually

For some reason I read it as “I lost the love of my life to two factor authentication” and really wanted to hear how that was possible.

IMO anything hooked up to your financial info should have 2FA

Just use Keepass, it lets you store your passwords and totp in an encrypted database file you can move around just like any other file. Just make sure you make a backup when ever you add new credentials.

My favorite is now needing two email accounts to access one.

I store 2FA in the same place I store my password, I just need to copy one, then the other. I may have lost hours or even days to 2FA, the same amount I lose by having to authenticate with a password

SoCal Edison just enabled 2fa? To protect what, exactly? Someone hack my account and pay my bill!

I had one the other day. Enter passcode from Auth app. Ok done. Great. We just emailed you another code enter that now.

What really grinds my gears is when they require a password as well.

Why did you require a password when your going to bug me about 2fa anyways? Why did you require me to change said password every 3 months if you bug me about 2fa anyways? Why are you asking me to switch my password with your dumb restrictions (no special characters, really BofA?) when it has been recommended for years to not require users to do that since it just makes the passwords less unique in the long term?

2fa is fine, just remove passwords if your going to do it.

I had a really fun one with my Google account the other day. It was the one where you had to select the number it was showing on "the other screen". However it was trying to show it on my same phone I was trying to log in on, only to immediately overwrite it with the prompt to select the correct number. Cue me sitting there having to guess the right number like 6 times before finally getting access, getting logged back out every time I failed to guess right

:3