Project: I am working on improving the 2 factor authentication (2FA) user experience for end users.
Problem: 2FA is an east way to drastically improve one's security posture with many sites (e.g. AWS, Github, Google, Stripe, etc), but it is still an incredibly annoying user experience that gets worse the more sites you use it with.
- When I pick up my phone to enter a 2FA code, I often get distracted by an email, text, or other notification. I'll put my phone down a minute later and think "what was I doing? Oh right, I need that 2FA code".
- It is also annoying to visually identify the correct site/account combo in my list of 2FA codes because I use many online services and may have multiple accounts at each one (e.g. AWS).
- Though some apps have a better UI presentation of 2FA codes, the classic Google Authenticator app shows all of the codes in a single list and I would often put in the incorrect code from a row above/below what I intended because it was difficult to visually keep track of the correct row as I transcribe the 2FA code into my desktop browser.
- It is annoying when the 2FA code changes while I am entering it in my desktop browser. Often, sites will accept the previous 2FA code as well, but if I only entered the first 3 digits and don't recall the last 3 digits, then I have to start over entering the new 6 digit 2FA code.
I am working on a new user experience which replaces these pitfalls and annoyances with the ability to simply click a button on your phone as your second factor of authentication. This workflow is compatible with any site that currently implements 2FA (e.g. AWS, Github, Stripe, etc, etc) and provides the same level of security as using another 2FA app such as Google Authenticator, Authy, etc.
It would be really encouraging/useful if you could leave a comment explaining why you might find this new 2FA UX useful or not! Thanks.