Paper auth, HOTP resync and TOTP support should be reasonable mitigations for this. We still get the occasional lost soul who got so out of sync our resync process doesn't work, but those are few.
Paper auth, HOTP resync and TOTP support should be reasonable mitigations for this. We still get the occasional lost soul who got so out of sync our resync process doesn't work, but those are few.