3 ms·

Yes, because of a horrendous implementation by Microsoft. 3 minutes instead of 30 second TOTP validity and unlimited guesses.

• fckgw 2y ago
  Technically, 10 guesses per session but unlimited sessions.