[vitalipom]

Thank you for the reference! Would you mind to see if you can reflect on my solution idea which I’m questioning myself about? I filed a patent for it and mentioned it in a comment above. Please

[efortis]

Yes, MFA with a click-link mitigates it. But a pastable token wouldn't.

https://en.wikipedia.org/wiki/Multi-factor_authentication