2 Factor Authentication with email

I don't think it's a bad practice. But I don't really see the value of it. To keep it simple, you can just add a column to your user's table like login_token or something similar, and create a random string token when the user hits the LoginController method. You would have to override a method in one of the traits to avoid Laravel from logging the user in. Use the mail facade to send an email to the user. You can create an endpoint like: /users/login/{token} where it hits a TokenLoginController and you search for a User with that login token, and manually log them in.

Hope it helps!

I don't think it's a bad practice because it qualifies as a two-step verification process where on sign in, a user will enter their password as usual and then they'll be asked for something else to confirm their claimed identity. However, '

I also think it's simple enough to implement manually - thus no need for a package. However, from a multi-factor authentication - https://en.wikipedia.org/wiki/Multi-factor_authentication - perspective it will have little value. I suggest that you consider including the recommendation by @wilburpowery in your implementation to add a concept of tokenization - https://en.wikipedia.org/wiki/Tokenization_(data_security).

Hey, thank you for your evaluation of my situation, the links and the hints! Yeah, I guess I have to read about the basics of multi factor auth a little bit more and probably then I will try to implement the logic described by @wilburpowery. Thank you both very much, this really helps me! :)

No problem at all @jonaspas. Hit me up if you need any assistance.

You are welcome @jonaspas