For the author... you may export/backup the TOTP secret from the TOTP app (MS Authenticator in this example) and save that someplace secure. You may use any TOT

For the author... you may export/backup the TOTP secret from the TOTP app (MS Authenticator in this example) and save that someplace secure. You may use any TOTP app with that secret to generate codes to log in. I typically do this as a safe guard in case the device that is running the TOTP app breaks or fails in some way. I'm old enough and my passwords are random enough that I don't worry about them being guessed. However, I do worry about web security in general and the fact that companies are basically black boxes with loads of young inexperienced developers. They may be storing our passwords as plaintext strings and have them in a public S3 bucket. But, if you want one of my YubiKeys, you'd have to find me and physically steal it from me and hope I don't notice. So there are some useful things with regard to 2FA.