We should offer some way of two-factor authentication: - TOTP - Confirmation code via email (à la Steam Guard)
We should offer some way of two-factor authentication: