2 ms·

That's why U2F is a better alternative - it avoids the phishing issue as well as the password reuse issue.