friends don't let friends use SMS 2FA. Hardware key (ideally) or smartphone app *only* https://t.co/KZBc6hho4m https://t.co/vRKBmB8aW0