- client - show QR code and password so we can copy to Google auth - modal doesn’t close when 2fa enabled - app - since client doesn’t show code the app can’t login unless it is already logged in