Two-Factor Authentication

TOTP-based 2FA is mandatory for every account (§13.26).