In order to improve security we should support 2FA using TOTPs compatible with apps such as google authenticator. The following package implements TOPT and seems to be quite well documented: https://www.npmjs.com/package/otplib