This, in a nutshell, is why I try to use VOIP accounts for 2FA where an SMS is required. The problem is that a service provider can tell if your number is a VoI

This, in a nutshell, is why I try to use VOIP accounts for 2FA where an SMS is required. The problem is that a service provider can tell if your number is a VoIP or a "real" number and refuse to let you use something like a Twilio or Telnyx number -- even though that would be more secure because someone stealing my phone (or SIM swapping me) wouldn't get them anything. As for TOTP, I'm personally use BitWarden both for storing passwords and TOTP codes as well. Yes, I know this makes my logins all 1FA if someone can crack into my BitWarden account but that would be difficult (short of torturing the password out of me -- at which point regaining 2FA to my accounts isn't my biggest concern). (This is also why I use a VoIP number for services like Telegram and Signal.)