We don't use a separate two-factor app today — and that's by design: there's no password on your account for anyone to steal in the first place.
We don't currently offer a separate two-factor step, and here's the honest reason. Lynqly is passwordless — you sign in through a one-time magic link sent to your email that expires in 15 minutes and only works once. There's no password stored on your account, which means there's nothing for someone to guess, phish, or leak. In practice, your email inbox is the key to your account.
Because your inbox is the key, the single best thing you can do for your account is protect that inbox — turn on two-factor authentication with your email provider and keep it locked down. If you ever see sign-in activity you don't recognize, email support@lynqly.com right away.