Whenever discussing this with colleagues there’s always been a bit of debate about whether OTP inside 1password constitutes 2FA or not. On the one hand a passw

Whenever discussing this with colleagues there’s always been a bit of debate about whether OTP inside 1password constitutes 2FA or not. On the one hand a password could be popped from the target site or phishing, and you’d still need the 2nd factor from 1password to get in. But on the other hand, if you leave your phone lying around unlocked with a poor master password, both get popped together.