A coworker in Tulsa laughed at my 2FA setup until it saved his account
Last month I watched a guy from accounting ignore the push notification on his phone, saying 'nobody's going to waste time hacking me.' Three days later his Dropbox got hit with ransomware that locked 40 project files, and he had to beg IT to restore from backups. Why do people still treat two-factor authentication like it's optional, especially after seeing one breach take down a whole team's deadline?