4 ms·
> If I can't even keep my phone around to use TOTP, I'm sure as hell not going to keep track of my U2F token. You effectively can't implement U2F without TOTP,
by Alex3917 8y ago
> If I can't even keep my phone around to use TOTP, I'm sure as hell not going to keep track of my U2F token.
You effectively can't implement U2F without TOTP, because otherwise when people lose their U2F dongle they'll be locked out of the site. For any given site you should turn on TOTP before activating U2F, but then store the TOTP secret somewhere secure and don't actually use it.