TOTP really is not a good idea nowadays. I'd rather see WebAuthn. It's modern and actually efficiently protects against many things TOTP is supposed to protect against and even more threat vectors.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments