4 ms·
With password I can login from any device (guest session on a friend's laptop, etc). So I am independent of a specific device. The second factor ties me to a s
by avodonosov 5y ago
With password I can login from any device (guest session on a friend's laptop, etc). So I am independent of a specific device.
The second factor ties me to a specific device.
- Someone1234 5y agoTOTP does not. Plus Google supports multiple concurrent 2FA tokens anyway.
- avodonosov 5y agoMultiple still tie user to specific devices. It will not work on a friends machine (unless user memorises the shared secret used for hashes). TOTP is essentially a glorified password (which is the shared secret), only so long that the user presumably does not remember it, so it is taken as a representation of a trusted device access. TOTP / HOTP are close to manual CHAP. I don't feel two passwords (the real password and TOTP shared secret) are better than one.