[huggingmouth]

Sure, but then you can't call it mfa.

[itsdrewmiller]

"password or email" is one factor and "code generator" or sms or whatever is the other factor.

[RamblingCTO]

Of course you can: password + email access = two factors = multi-factor

[NoZebra120vClip]

> Of course you can: password + email access = two factors = multi-factor

No, you're resetting an unknown password, bypassing one of those factors.