Comment

Comment by saint_yossarian

It's still 2 factors though, if someone discovers your password they don't automatically know the TOTP key. So I use TOTP in my password manager for sites where I wouldn't use 2FA otherwise (because using my phone would be inconvenient), so it's still a security improvement for me. And for critical accounts I do use Aegis on my phone.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton