Worst one I've seen: username and password plus a 2FA email, BUT if you hit enter instead of clicking the last button it refreshes the page.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments