"How do we share access to two-factor authentication."

What you mean is "how do we defeat the purpose of multi-factor authentication."

@ewpratten I've suggested a cleaner solution for our situation, but the very notion of what is essentially shared access to a 2FA code provider is just... well I need to shower now.

And yes, I know Authy makes a business out of it.

Synergy ftw?

this falls under convenience vs security. unfortunately convenient usually tops security in people's minds cause we're naturally lazy. then they complain when their shit gets hacked.