Take the 2-minute tour ×  When should email be protected by 2
factor authentication?  Suppose a given company is in an
industry where two factor authentication is offered to some or
all of its clients. Does this mean that it should also offer (or
require) two factor authentication to its employees?  If the
roll-out of two-factor authentication doesn't target every
applications in a company, what criteria should be used when
evaluating an application?  share|improve this question Cost of
extra security / risk of exposure. Everywhere. Every time. – 
Jeff Ferland Feb 10 '12 at 15:12 add comment  1 Answer  I don't
think there is a simple answer for this: your security demands
may vary. If you fear keyloggers stealing your passwords, giving
adversaries access to confidential email, then by all means use
2-factor authorization (among other techniques). However, if you
only anticipate receiving relatively mundane emails then there
isn't a need for it, and enabling it could be an extra burden --
e.g., if you lose you