On: Want to be more secure? Build two-factor authentic...

[krosaen]

If you do add it, make it optional (maybe I don't care that much about my data in your web app). And choose duo, they rock!

[sriramiyer → krosaen]

Implementations like Duo help only if you're the service provider, right? As a user, independent of the service provider is there anything I can do?

[rmason → krosaen]

I second the recommendation for Duo. Know them personally and yes they do rock!