Comment by EVa5I7bHFq9mnYK

2 years ago

The desktop version somewhat contradicts the purpose of 2FA.

In this case what if you use 2FA while browsing with your phone. Wouldn't that also contradict the purpose?

The main purpose is that people won't get phished as easily or if they reuse passwords it can't be abused. Or if password was to leak for any reason.

Not really, 2FA is literally just that: a second factor.

It makes it unlikely someone has access to both your password and the TOTP URI. So, if you leak your password on a public forum (for example), the person who gets that is not likely to also have your TOTP info.