This is generally specified as an choice to the consumer so that in the occasion of dropping access to the device which they've got registered the MFA secret with, they are still in a position to log in. another() way https://winfrew.com