Another important step is to ensure that your clients are able to authenticate you. RADIUS two factor authentication software https://www.protectimus.com/radius/ allows you to use a fingerprint scan or another type of authentication to reduce the chances of malicious attackers getting your credentials. It also allows you to configure a custom timeout and retry count for your clients. However, it is recommended that you do not set your RADIUS timeout higher than 60 seconds

Хачу питомса

Глеб

As for the suggestion "Also provide other options for 2FA apps not just Authy" there's another request for that. Best to keep these two requests separated even though they are related.

This one seems to have the most votes: https://twitch.uservoice.com/forums/310228-account-management-e-g-login-connections-pass/suggestions/11498085-google-authentication-for-2-factor-authentication

Careful. If an email account is hacked, the corresponding Twitch account would be hacked as well. The idea is not bad, but you should not get the codes by mail.

Simply you should add a recover account option for 2fa where you receive a token to open your account