> Their main weakness is that they can be backed up or copied at all Which is also a major strength. I've had the experience of a phone app losing all of my TO

> Their main weakness is that they can be backed up or copied at all Which is also a major strength. I've had the experience of a phone app losing all of my TOTP information, and spending a long while having to use the recovery paths of various websites. After that experience, I want my second factor to be something I can back up and restore. That'll continue to be true until either all websites reliably accept multiple 2FA devices (e.g. register multiple hardware keys) or I can buy multiple redundant hardware devices that produce the same TOTP codes so I can register "one" device with a site and still have a backup. I wish the Firefox password manager had builtin TOTP support.