Please feel free to provide evidence-based best practices, share a micro-victory, discuss strategy and concepts with a frame work, ask for feedback, and create professional conversation. Treat every post as if you're at work and representing the best version of yourself.
You could require 2FA to login, and then the folks sharing accounts would need to be in the same location. Solves the problem for new users going forward but wouldn't necessarily solve it for our users that are already logged in.
More importantly, is this really that big of an issue? In other words, is this even a problem worth solving because you're missing out on so much additional revenue, or is this a once in a blue moon type of problem?
I have to agree with this. Sounds like a trivial issue right now, you should be spending this time for getting more new customers instead of trying to convert people into from the rare few customers that are gaming the system. This is even assuming they would convert to paying customers instead of just stop using your product.
Just worth noting that this would pretty much only work if the OTP is sent via SMS, no other 2FA flow would solve the issue Beit email or with a TOTP QR code or wtv
If this is widespread, it may be time to change your pricing model, like instead of per-user than some other measure like number of projects set up or whatever is a usage-based appropriate measure.
You might be right here. Something that can’t be looped-holed. Thanks for the advice!!