@Bitplumber @alexandria Because if your password is compromised your 2fa will keep your account secure unless the attacker also breaches 2fa, and most attackers are not capable of breaching both? I don't see how this isn't immediately obvious.