2 ms·

In practice in many services 2FA is about hoarding PI to target ads, not improve security. I don't buy into that.

• layer8 4y ago
  TOTP doesn’t expose PII.
  • rightbyte 4y ago
    Don't you need to send the generator hardware dongle thingy (whatever it is called in English) to the user?
    • layer8 4y ago
      TOTP uses a publicly known algorithm that you can implement yourself. Most people use an app, but that’s not mandatory. No special hardware is required.