@gruber Since I’m running my own instance, both my instance’s backend CP & my login are both protected by 2FA. Wouldn’t think of running without.