Quit sending me codes. Just let me login with my fucking password!
@jackbrewster The owl hoots when the giant sleeps
@jackbrewster either text me a code, or use an Authenticator app code thingy that integrates into my password manager. Fuck right off with emailing a code, or passkeys, or “verify with our app!”. No.
@jackbrewster I realised sites might like doing this to cut down on password sharing. It is of course painful for the user. But screw users. What’re they going to do, not log in?

@jackbrewster @mralancooper OR: How about we ask your username, then a new page that takes 10s and a Cloudflare (10-30s), asking if you want 2F, password, passcode, or email, then another load, THEN the form field?

That's apparently best practice now.

@jackbrewster I’m quite worried about email being hacked as a single point of failure