Conversation

https://dunkindonuts.com/ rejected my username and password. I tried to reset my password to the one already in my password manager, and it told me I couldn't reuse my existing password; so why didn't it accept it before?
After I got past that it made me add a phone number to my account for 2FA. I like 2FA, but I also like privacy, so I'd rather they supported TOTP or WebAuthn so I didn't have to give up my phone number. Also, SMS 2FA is crap.
#ChangeOfAddress 🧵