That doesn't mean they have access to my TOTP for the service, even if it's managed by the 1P app.
Loss of 1P's password/key would indeed also mean loss of my TOTP. But then one would have much bigger problems anyway, except if all their 1P passwords also had an external TOTP.
The password becomes known to attackers somehow.
That doesn't mean they have access to my TOTP for the service, even if it's managed by the 1P app.
Loss of 1P's password/key would indeed also mean loss of my TOTP. But then one would have much bigger problems anyway, except if all their 1P passwords also had an external TOTP.