3 ms·
TOTP is bad. TOTP is phishable. Stop using or promoting TOTP. We have modern authentication called WebAuthn, supported by Bitwarden proper as well as physica
by sneak 2y ago
TOTP is bad. TOTP is phishable. Stop using or promoting TOTP.
We have modern authentication called WebAuthn, supported by Bitwarden proper as well as physical security keys and iOS’s native password manager. Use it.
- Sharparam 2y agoTOTP is still the MFA option that is supported by most services. WebAuthN is of course better, but it's still a minority that supports it.
- linsomniac 2y agoI agree that webauthn is a better choice than TOTP, but it is not really a choice in most services today. Sites having WORKING webauthn are so rare that I literally mentioned it on my work Slack 2 days ago when I set one up at Target and it worked.