3 ms·
My understanding is that, TOTP are equally vulnerable to phishing. Hetzner Cloud and Bitwarden use Yubico OTP.
by aborsy 3y ago
My understanding is that, TOTP are equally vulnerable to phishing.
Hetzner Cloud and Bitwarden use Yubico OTP.
- sneak 3y agoUse U2F instead.
- m-p-3 3y agoU2F is FIDO1 though, everyone is switching to FIDO2/WebAuthn/Passkeys.
- advisedwang 3y agoTOTP can be phished. The parent is recommending FIDO/WebAuthn