I use Authy, but the same exact app is running also on my phone (and it's needed to sync the accounts). This means that it's not really another device. Also, t

I use Authy, but the same exact app is running also on my phone (and it's needed to sync the accounts). This means that it's not really another device. Also, totp can be phished in principle. I'd very much like a fido/u2f device.