I use Arch btw

i declare security!

I understand 2fa, but the way many companies have implemented it is such a shit implementation that it's nothing more than security theater designed to purposely make my life difficult, but not actually secure anything. Anything to do with medical stuff seems to be particularly bad. And OMG, don't get me started on the shit they put behind 2fa for no reason other than fuck with you. Why do I need to log in so I can see some completely public information? Just so they can track me... Ok, I will fucking log in then... And it's behind 2fa... And because they don't give a fuck the 2fa server never sends 2fa verification.

So, I think 2fa is technically a great idea and the way to go, but at the same time, I fucking hate 2fa.

To that point: it's 2 factor authentication. That is, proving who you are through 2 different factors, usually something you know (a password) + something you have (a physical device) or something you are (biometrics).
The point is that "something you know" can often be easily acquired by malicious third parties and it is generally much harder for them to gain access to "something you have" or "something you are". Thus requiring 2 different factors blocks most nefarious access attempts.

Authorization is a separate, different step that, usually after having already proven you are who you say you are, verifies whether you're allowed to do what you're trying to do. This generally doesn't require multiple factors because you've got nothing left to prove: the system knows all about what you're permitted to do.

Mnemonic:

• authentication: you are an authentic person (as opposed to impersonating someone)
• authorization: you are authorized to perform an action

It's possible to understand 2FA, be all for the extra security it can provide, and wanting it enabled for important logins. And at the same time hate it for how annoying it can be.

And that's even not getting into the poorly designed and implemented 2FA systems, many of which end up not actually providing any extra security.

How do you come to that notion?

It's from a show called Death Note. A guy finds a book in which you enter the names of people you want dead, and then they die. It's a pretty good show. Kind of a cat and mouse detective show almost, but with a supernatural twist.

If they're also complaining about Teams, I'd venture to guess that they're complaining about the near incomprehensible implementation within Microsoft Office ecosystem (and their web UIs).

Passkeys are actually goated tho