AOL like the other Email Inboxes and servers asks the User to jump, flip over and comply to various requirements when a password was working. maybe like Good you add the test message code. But to ask for the picture of the QR Code on the user's cell phone is going to far. I have to then erase history on all browsers on the mobile device. This is an Email company not a mobile, mail, phone #. Too much for merely looking at message. Besides this... it is an illusion of security for the User. Basic, don't share sign in information with others. Don't use an unprotected wireless system for going online. And dump your junk and spam -- flag it in the system. But soon, you will be asking for my favorite ice cream? Thank you.