Allow an option to login with SMS or verified email
Why do I have to use just SMS code login options when I went through the process of verifying my email. I should be able to chose SMS or email verification and if I'm trying to change my SMS code phone number why does it send a code to the phone number I'm trying to change? why not send a email to my already verified email. When I'm trying to disable 2FA why isn't there a option to disable it via email as well? Also if you no longer have your phone number you had when you made the account you cant even activate the authenticator app because it sends a SMS code instead of email. Why is everything going through SMS when your phone is probably the easiest thing to steal these days.
TrynShikata
shared this idea
-
crimu17
commented
Let the user choose (as google does) which 2FA method use after the login with username and password.
Otherwise, you end up in situation like that: https://www.reddit.com/r/Twitch/comments/xfzroj/appeal_to_gdpr/