Not once was I asked if I wanted 2FA (two-factor authentication) for my Apple or Amazon accounts.
I don’t want 2FA, because, being homeless/poor, you frequently lose access to phones and the like. That’s why a lot of homeless people will have like a dozen abandoned FB accounts (I have 3), because we just haphazardly use the suggested “secure password” to log in, and then someone steals our phone, or we lose it, or drop it in the toilet.
So no, Apple, I don’t have that device anymore. I don’t have that phone number either. Or access to that email address. The last four digits of a debit card I’ve used? b0i.
The one thing I do have?
MY FUCKING PASSWORD
I’m getting locked out of accounts I have the fucking password for! What the FUCK?
Yeah, and 2FA is so slapdash depending on who is asking you to use it. There is very little reason why any 2FA system couldn’t support, say, letting you store the 2FA token in your password manager, but a lot of them will INSIST that you have to get a text message or an email. There is very little reason why these systems SHOULDN’T let you use one of these:
The only thing that might get in the way is the level of complexity of the OTP it generates. I mean, maybe there is deep levels of nuance I’m not seeing here, but I manage a Duo instance for my day job and could support everything from email codes, text codes, phone push notifications through the Duo app, all the way down to those cheap little hardware devices that use an 8 segment display to give you your numbers.