Hi

Is there a plan to update the choices for 2FA in the future, i.e. instead of second verification via email we could have the option of TOTP?

We don't know of any such plans, though it's been discussed in forums for years.

Knowing GOG they'd rather introduce their own half-assed mobile app like Steam instead of open TOTP standard.

Or just sign up to an SMS service like most other companies do. e-mail based 2FA is just a PITA.

Sad and cringe, but true.

In truth, I was really hoping for some optional FIDO2, but TOTP would be OK, too.

And it would be in the interest of GOG, right? I would not feel much encouragement to spend hundreds of monetary units into an account that could be taken away from me should my email account be accessed by a bad actor.