Lack of interest Force user to remember reserve auth codes or allow to change method of 2FA

[grisha2217]

Hi guys. I'm owner of huge forum with 500k registered members. I enabled 2fa for all members, who has more 10 likes. Everyday members write me, that they reseted your smartphone or lost it, ask me to disable 2fa for theim and i do it. They don't save reserve auth codes, of course.

My suggestion:
Print reserve codes on page and show "i saved this codes in text document" button after 2fa enabling.

2nd suggestion (optionally, can be disabled in admincp):
If user does not have access to smartphone app, he can pass 2FA throught email code receiving.

 

[Jake B.]

If user does not have access to smartphone app, he can pass 2FA throught email code receiving.

They can already do this if they setup both GAuth and email validation. If you force enable email validation on all users having GAuth means essentially nothing since it can be bypassed