Yes, but 2FA is usually another app, not email. Or even if it’s the same app being in your very password manager, it gets the second password from the algorithm. So if you steal my password, you can login. But stealing these 6 numbers that work for just 30 seconds is useless.
Well it wouldn’t be 2fa if you don’t use a password. Then it’s just 1fa.
(in case you didn’t know, 2fa stands for two-factor authentication, as in secondary authentication (usually besides a password))
As pointed out, if password can be reset from the same email you receive 2fa codes then it’s 1fa with extra steps.
Yes, but 2FA is usually another app, not email. Or even if it’s the same app being in your very password manager, it gets the second password from the algorithm. So if you steal my password, you can login. But stealing these 6 numbers that work for just 30 seconds is useless.