As of 9/1/25, Zeffy supports 2FA, but only through SMS messaging. While better than nothing, but it's the least secure form of 2FA, and has been deprecated in many systems. Authenticator apps are a step above that and provide time-based one-time tokens.