2 ms·
I haven't seen anything indicating TOTP is being phased out, but there are several reasons Google may be driving people to Security Keys (aka Webauthn, FIDO, u2
by advisedwang 5y ago
I haven't seen anything indicating TOTP is being phased out, but there are several reasons Google may be driving people to Security Keys (aka Webauthn, FIDO, u2f):
* TOTP (and SMS codes) can be forwarded, so you can be phished/duped into entering credentials on a spoof website. FIDO prevents this.
* TOTP (and SMS) may be grabbed from your phone by malware. This is harder with FIDO as it requires a physical button press.
* TOTP requires substantial user knowledge to use correctly. FIDO also has usability issues (have to keep your key with you, endless USB-A vs USB-C issues) but maybe they believe its better.