2 ms·TOTP can be phished. The parent is recommending FIDO/WebAuthnby advisedwang 3y agoTOTP can be phished. The parent is recommending FIDO/WebAuthn