A suggestion for Google Two Factor Authentication

[cspgsl]

I don't know if this is the place for such a suggestion so if it should be elsewhere, please let me know.

I have enabled GTFA on several dozen sites and suggest that when one opens the backend/administrator window when GTFA is enabled, the cursor should be set in the secret key window by default.

Just a thought

[mbabker]

Most two factor authentication applications require your username and password as step one then the second factor (YubiKey, Google Authenticator, SMS verification, etc.) as a second step. So based on existing workflows with numerous other sites and what I'd call a reasonable expectation, I wouldn't expect to first input a 2FA response then the normal username/password authentication.

[cspgsl]

I thought of that after posting and realize the unlikelihood of my idea becoming reality.

For many developers like myself who work alone in a home office, usernames and passwords are stored by the browser. Such a setup would be a convenience, notwithstanding any security issues.

[LukeDouglas]

There should be a text message option instead of using the Google Authenticator.

[cspgsl]

Where is the SMS option or are you saying that SMS should be an option?

[LukeDouglas]

It should be an 'option'. Right now you have to use either the Google Authenticator or the YuriKey (I think that is the way you spell it.)