>Are there other threats that TOTP-in-password-manager can protect against that the randomized passwords don't already? tbh the UX problem of 2fa for "I use ra

>Are there other threats that TOTP-in-password-manager can protect against that the randomized passwords don't already? tbh the UX problem of 2fa for "I use random passwords and am not vulnerable to credential stuffing" users is a pretty big reason to stick TOTPs in your password manager. Security is always a series of trade-offs, and 2fa brings some hideous trade-offs in many sites (well over half only allow one at a time, for example, and then you lose access permanently). TOTP with a standard like this lets you choose, rather than the site choosing for you.