DracoBlue Two-factor authentication can also be: Security questions
+1 for 2FA via authenticator apps.
Enhance shouldn't even bother implementing security questions. They are completely useless against a targeted attack. "whats your first pet" "mothers name" "where did you live in college" and almost any security question can be found easily for free without any victim interaction by a competent attacker.
Two factor authentication via some app (not sms) works because it almost idiot proof and can't be answered through public records and social media and much harder to intercept.
