03/05/2026
⚠️ Is your business being asked to set up Two-Factor Authentication (2FA)? Read this first.
In my work I am increasingly coming across platforms mandating 2FA — Splose, Xero, Microsoft, Google, ATO, banking — and the default advice is always the same: "download an authenticator app on your phone."
But here's what nobody tells you...
If privacy is your concern — and it should be, especially when you hold sensitive client data — downloading Google Authenticator, Authy or Microsoft Authenticator onto your personal phone means handing a piece of your security to Google, Microsoft or a third party. On a device that also runs other apps, connects to the internet, and is vulnerable to malware.
For those of us handling sensitive client data across multiple platforms, that is a real privacy risk worth taking seriously.
So I did my research and I've purchased a hardware token — specifically the Token2 Molto-2 — and here's why I think it's the smartest move for anyone in a similar position:
🔒 Completely offline — generates codes with zero internet connection
📵 No phone required — programs via USB directly from your computer
💼 Holds up to 100 accounts — one device for every platform you use
✅ Works with — Splose, Xero, MYOB, QuickBooks, Microsoft 365, Google Workspace, ATO myGovID, most banking platforms, and virtually any platform using standard 2FA
🇨🇭 Made in Switzerland — independently security certified
Your security codes live on a physical device in your possession — not on a phone app syncing to someone else's cloud. Not embedded in a browser. Not tied to Google or Microsoft.
The world of mandatory 2FA is only going to get more widespread. If protecting your data and your clients' data matters to you, now is the time to set yourself up properly rather than scrambling every time a new platform demands it.
