4 ms·
No need to be sarcrastic. He is absolutely right. The seed is all you need in case of the common TOTP algorithm. There is no connection to the device. In fact,
by ascar 5y ago
No need to be sarcrastic. He is absolutely right. The seed is all you need in case of the common TOTP algorithm. There is no connection to the device.
In fact, in Google Authenticator you can even conveniently export all running TOTP to another Google Authenticator without any connection with the apps or anything else whatsoever.
- nl 5y agoThat wasn't supposed to be sarcastic at all. I was in total agreement with him - you can in theory run the algorithm by hand. It isn't especially relevant though - 2-factor is "something you know, something you have". You need to have the hash.