4 ms·

Ideally yes, but let's not let the perfect become the enemy of good. If that's what available right now, it should still be used and recommended.

• rightbyte 4y ago
  In practice in many services 2FA is about hoarding PI to target ads, not improve security. I don't buy into that.
  • layer8 4y ago
    TOTP doesn’t expose PII.
    • rightbyte 4y ago
      Don't you need to send the generator hardware dongle thingy (whatever it is called in English) to the user?
      • layer8 4y ago
        TOTP uses a publicly known algorithm that you can implement yourself. Most people use an app, but that’s not mandatory. No special hardware is required.