Hacker News new | ask | show | jobs
by StavrosK 2731 days ago
Just don't let them proceed without generating and inputting a code. Why are you just showing the QR code and hoping they save it?
1 comments

Services like AWS do this. Requiring them to provide at least one (if not two) generated codes before proceeding ensures they have at least captured the 2FA code.