2FA into the login page (without email or phone number)
I have a question regarding UX of the 2nd factor authentication (2FA) process.
It is common in the authentication process to ask for user id (commonly email) + password, and in a second step ask for the 2FA.
I understand that this is useful and necessary for email and sms based solutions.
But why not ask, in the login page, for the code when it is app based solution (Authenticator, Google Authenticator, etc…)?
In the login page it would have 3 fields
- Password
- 2FA code