From 15e76df992681d6b58151efd226c7f2340ed7113 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Fo=CC=88rtsch?= <felixfoertsch@gmail.com>
Date: Tue, 15 Jan 2019 10:33:55 +0100
Subject: [PATCH] add disclaimer about using password manager as 2FA

---
 config/twoFactor.js | 46 +++++++++++++++++++++++----------------------
 1 file changed, 24 insertions(+), 22 deletions(-)

diff --git a/config/twoFactor.js b/config/twoFactor.js
index 62895c1..cc42436 100644
--- a/config/twoFactor.js
+++ b/config/twoFactor.js
@@ -8,9 +8,33 @@ export default {
     \n\n**You should not use your phone number as a two-factor method.**
     
     \n\nAt minimum 2FA should be installed on accounts that can lock you out of other accounts: e.g. a Google account, email applications, an Apple ID, and financial accounts. For stronger security, ensure that 2FA is enabled on every service you use that supports it.
+
+    \n\n**Be aware:** Using an all-in-one solution like 1Password for both password management **and** 2FA creates a single point of failure. Take this into account when picking your 2FA client.
     `,
   apps: [
     {
+      {
+      name: 'Authy',
+      image: '/static/img/authy.jpg',
+      url: 'https://authy.com/',
+      sources: {
+        windows: 'https://authy.com/download/',
+        macos: 'https://authy.com/download/',
+        ios: 'https://itunes.apple.com/us/app/authy/id494168017',
+        android:
+          'https://play.google.com/store/apps/details?id=com.authy.authy',
+      },
+    },
+    {
+      name: 'Google Authenticator',
+      image: '/static/img/google-authenticator.jpg',
+      url: 'https://www.google.com/landing/2step/',
+      sources: {
+        ios: 'https://itunes.apple.com/us/app/google-authenticator/id388497605',
+        android:
+          'https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_us',
+      },
+    },
       name: '1Password',
       image: '/static/img/1password.jpg',
       url: 'https://1password.com/',
@@ -39,28 +63,6 @@ export default {
         android: 'https://lastpass.com/android_market.php',
       },
     },
-    {
-      name: 'Authy',
-      image: '/static/img/authy.jpg',
-      url: 'https://authy.com/',
-      sources: {
-        windows: 'https://authy.com/download/',
-        macos: 'https://authy.com/download/',
-        ios: 'https://itunes.apple.com/us/app/authy/id494168017',
-        android:
-          'https://play.google.com/store/apps/details?id=com.authy.authy',
-      },
-    },
-    {
-      name: 'Google Authenticator',
-      image: '/static/img/google-authenticator.jpg',
-      url: 'https://www.google.com/landing/2step/',
-      sources: {
-        ios: 'https://itunes.apple.com/us/app/google-authenticator/id388497605',
-        android:
-          'https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_us',
-      },
-    },
     {
       name: 'YubiKey',
       image: '/static/img/yubico.jpg',