Default 2FA method
Email delivery is familiar, works without installing an app and provides a practical second factor for most clients. TOTP remains available for clients who prefer device-generated codes.
Easy to adoptUses the login email.
Broadly accessibleNo app setup required.
TOTP is availableChoose it when preferred.
Practical protection
The six-digit code is delivered to the email associated with the login and expires after ten minutes. This makes it suitable for clients who do not use an authenticator app.
Secure the mailbox
Use a unique mailbox password and enable its own 2FA. Keep the UKC login and email recovery details current.
Alternative
An authenticator app can be preferable where the mailbox is slow or several account logins use separate emails. Store a backup code whichever method is selected.
Article feedback
