> The main concern for people using TOTP from a password vault is attacks against the websites they are visiting, not compromise of their password vault. Well,

> The main concern for people using TOTP from a password vault is attacks against the websites they are visiting, not compromise of their password vault. Well, if they gain access to your machine, they can't access your iphone. Or yubikey. Just don't kid yourself—you use the same password for everything, and that's your only factor.