Comment on Booking.com ignores twofactor, lets everyone email-login without a passwordparentComments−elevatedastalt2yIn my understanding the authenticator app is not the only way to have 2FA. It looks like here Booking was using the email for verification? This seems similar to a forgot password flow.
Comments
In my understanding the authenticator app is not the only way to have 2FA. It looks like here Booking was using the email for verification? This seems similar to a forgot password flow.