setting up 2FA without phone

Summary

I cannot use a phone for 2FA and don't understand the other solution

What is the current bug behavior?

https://gitlab.eclipse.org/help/user/profile/account/two_factor_authentication.md propose several software and/or browser plugin to use 2FA, yet the actual behavior of these solutions is unclear:

• do they also requires a phone number?
• do they impose restrictions on browser usage (some authentifications plugins seem to imply that only one machine can be used, in not-private mode and that the cache must never be cleaned)?

What is the expected correct behavior?

2FA using an email address (possibly different from the one used as eclipse account login) instead of a phone number could be a solution.
A third party software or browser plugin/configuration can be used but more information are required (there are also security considerations of my IT department in order to allow this): in this case this solution should be able to be implemented on different machines.

Priority

• Urgent
• High
• Medium
• Low

Severity

• Blocker
• Major
• Normal
• Low

Impact

From 4th of December on, I won't be able to contribute anymore to my eclipse project.