It's a thing. Here's a write up on 2FA and Phoenix with Guardian [https://teamgaslight.com/blog/two-factor-authentication-in-elixir-and-phoenix](https://teamgaslight.com/blog/two-factor-authentication-in-elixir-and-phoenix)