Need a call to action after adding 2FA on a 2FA-required site

While observing someone else go through this:

  • they weren’t sure which button to hit to add a U2F Yubikey or a TOTP
  • they weren’t sure what to call the token and why it mattered
  • they weren’t sure what had been registered after registering Windows Hello as a security key

I think normally someone visiting the 2FA page already knows about these terms, whereas someone on a 2FA-required site might not.

I might change the text to include examples:


Time-Based Tokens

example: Google Authenticator
+ Add TOTP Authenticator

Security Keys

example: Windows Hello, Yubikey, U2F Hardware Tokens
+ Add Security Key

6 Likes