Today I Noticed: that any 2FA app should list the codes as an LRU cache.