It would be neat if that six digit number was wrong, and entering it was verification that your password was compromised.

I hate these and like every bank uses it. Ignoring the fact they tell you the code above, SMS is not secure. Its slower than letting my password manager fill in a Passkey or TOTP which are more secure.

Just today I witnessed someone working from home who had to move to a new system at work. Part of the instructions involved deactivating their 2FA app, which was apparently still needed for a later step in the process. They were supposed to use a backup phone number in the account to receive a text code to sign in, but, of course, there's no backup phone number in their account.

If only their job used this scheme instead. sigh

4 3 5 8 5 1