2FA best practices?

Very wise words.