@Jestingrabbit @bairdjulia @techAU @Facebook This, except use @Authy instead of Google Authenticator. Same underlying mechanism (TOTP), but GA won't let you backup your secrets, so if you drop your phone down the bog you're screwed.