While observing someone else go through this:
- they weren’t sure which button to hit to add a U2F Yubikey or a TOTP
- they weren’t sure what to call the token and why it mattered
- they weren’t sure what had been registered after registering Windows Hello as a security key
I think normally someone visiting the 2FA page already knows about these terms, whereas someone on a 2FA-required site might not.
I might change the text to include examples:
Time-Based Tokens
example: Google Authenticator
+ Add TOTP Authenticator
Security Keys
example: Windows Hello, Yubikey, U2F Hardware Tokens
+ Add Security Key