Users have requested 2FA to improve account security. Support for both TOTP authenticator apps (e.g. Google Authenticator, Authy) and SMS-based codes should be considered.
Recovery: Users should be able to generate backup codes in case they lose access to their 2FA device.