two factor authentication - security risk?

[John4111]

Just wondering if the current 2 factor authentication setup is secure based on other IT user's experience.  I use it, I like it, but I changed my phone and I'm able to logon with a new 2fa device during setup with the only requirement being access to a code sent to my email. 

Seems to me like the feature to connect a new authenticator device/app should be a bit more rigorous and/or should be able to be disabled for users and/or the admin.  Looking for input.

Thanks,

J

[ShaneP2]

---

@John4111 wrote:

Just wondering if the current 2 factor authentication setup is secure based on other IT user's experience.  I use it, I like usps tracking it, but I changed my phone and I'm able to logon with a new 2fa device during setup with the only requirement being access to a code sent to my email. 

Seems to me like the feature to connect a new authenticator device/app should be a bit more rigorous and/or should be able to be disabled for users and/or the admin.  Looking for input.

Thanks,

J

---

I use it everyday and I dont think so.

Thanks and Regards,

Shane