Adam Yes this already works. It doesn't need to be Google Authenticator, any TOTP software should work. We have an open feature request to add a setting to make this mandatory for customers.