Hacker News new | ask | show | jobs
by mwwaters 1478 days ago
The OTP is already a second form of authentication. An email link would be a third form. I never saw that when I used Authenticator.

Anyway, the user would likely still click the link in the email since they are trying to log in.