Query on best practice – using 2FA to self-authorise IP addresses in an allow-list

I want to know whether a solution I’m considering for a web app is particularly secure / in line with best practices etc.
Scenario – a web application, it’s a stock management app for small retailers. There is an element of sales/customer … Continue reading Query on best practice – using 2FA to self-authorise IP addresses in an allow-list