Hacker News new | ask | show | jobs
Why is NPM getting rid of TOTP as 2FA authentication method? (github.com)
3 points by whicks 148 days ago
1 comments

Does NPM require MFA to be used?

If so I could understand this (although there are certainly arguments to have had about it). But if they allow accounts without MFA then this would seem counterproductive, because while TOTP has issues it's a lot better than nothing.