Time-Based 2FA
Time-based 2FA is far more secure and private, and sometimes more convenient, than SMS-based 2FA. I shouldn’t have to give you my phone number in order to make my account more secure, and SMS 2FA is too easy to circumvent versus time-based codes. For people who use password managers, email- and SMS-based codes take longer to retrieve on certain devices where a password manager would be able to autofill time-based ones.
Amoridion
shared this idea
-
KimNoSubstitute
commented
Yes, I tried talking to the Twitch support about this, and they were completely oblivious to the fact that people may not want services to have their phone numbers, let alone understand that SMS 2FA is a really inferior method.
Twitch can keep it as an alternative, but should definitely allow users to remove it, after adding a better method.