Hacker News new | ask | show | jobs
by MetroWind 1512 days ago
It can't be helped I think. The chain of trust must start somewhere.

What if someone secretly have your password and enable 2FA? The addition of the 2nd factor of auth is a big deal and the process should be as secure as possible.