Google Authenticator / Authy for Account login verification method

Google authenticator uses TOTP to do its thing, the current status on this seems to boil down to

“TOTP sounds like a lotta work to get right… isn’t the email thing fine for now… we’ll do it soon guys…”

which, while very low energy, is something at least! It’s been 2 years.

See these threads for more details:

The latter of which has a neat poll with results that may surprise you.