Originally Posted by
josephstern
Hmm. I was just able to log in and disable two-factor, without needing my two-factor code.
Kinda defeats the purpose.
But to login you did need to use two-factor auth, so I don't think it defeat the purpose. On top of that, we also ask for your AwardWallet password to disable two-factor auth.