[PunchyHamster]

if 2fa is "use the second factor that's on same device as first factor" (like when using phone apps in many cases, password + 2fa from email/sms/authenticator app on same device), I disagree.

[dwedge]

If I get your password, and you use 2fa that's stored on your phone, does that improve your security position or not