> all of the problems you mentioned around needing your phone are common to nearly all two-factor auth solutions. Not true. From his list of problems, TOTP do

> all of the problems you mentioned around needing your phone are common to nearly all two-factor auth solutions. Not true. From his list of problems, TOTP does not require the Clef servers (or any third-party server), nor does it require your phone camera or (more importantly) phone networking to be working. And to make the comparison fair, you have to realize that this is not two-factor. There's only one factor (something you have) since there isn't a password requirement.