World of Warcraft and Rockstar Games have both offered incentives like this. Twitch phone number philippines, also a Twilio Authy 2FA customer , began offering similar emoji incentives last month. Platforms and service companies also offer incentives in the form of price discounts. Mailchimp offers a 10% discount for 3 months for accounts that activate 2FA. Hoster NIC.UA offered a 15% discount when they launched 2FA in 2017. Access to certain features with A2F Another way to incentivize 2FA is to unlock features for users who have it enabled.
This is a way to enforce 2FA for high-value accounts. For example, GitHub requires 2FA for users who want to participate in their Sponsorship program. Apple no longer allows you to disable 2FA , stating that “certain features” in recent versions require this extra layer of security. Epic Games offered another incentive last month, opening the doors to free games for users who enable 2FA. Require A2F Not all consumer companies can get away with mandating 2FA, but if your users understand the risk, then it can make sense.
Financial companies, including banks and crypto companies, can require 2FA for their users. We’ve also seen companies hit by bad security publicity mandate 2FA. Privacy Considerations to Encourage A2F Every time the discussion comes up, I see variations of this question: “Are companies doing this just to collect your PII ?” Please do n't be that company. Separate marketing from security and be clear about how you use your users' data. Offer incentives for all channels, including TOTP (no PII required) or email (which the company probably already has).