4 ms·
TOTP is pretty standard. Give the user backup codes and just use normal recovery methods. For most things that might be email. For a bank it's probably identity
by basilikum 9mo ago
TOTP is pretty standard. Give the user backup codes and just use normal recovery methods. For most things that might be email. For a bank it's probably identity verification.
- freddie_mercury 9mo agoThe vast majority of Vietnamese I know do not have an email account. So that would be a dumb thing for a Vietnamese bank to use as a recovery method.
- morshu9001 9mo agoEmail shouldn't be recovery for bank anywhere, you go to the bank for that. But TOTP is so user-hostile that I can see it causing too many recovery requests for the bank.