Hacker News Reader

Just don't let them proceed without generating and inputting a code. Why are you just showing the QR code and hoping they save it?

View on HN

Services like AWS do this. Requiring them to provide at least one (if not two) generated codes before proceeding ensures they have at least captured the 2FA code.

Reply on news.ycombinator.com