← Back to context

Comment by Telaneo

5 days ago

TOTPs are already not that great in my opinion. It's like democracy: the least bad option. It's a decent trade-off between convenience and security, so I'll stick to unless there are good reasons not to. Passkeys have managed to make that experience worse, with a very large potential gotcha in the future, while not introducing any improved security I see why I should care about.

4 comments

Telaneo

Reply
cowlevel  5 days ago

I've had nothing but bad experiences with TOTP. Mostly involving dead phones and having to find the backup codes.

  • Telaneo  5 days ago

    You can back up the TOTP secrets to add another layer of protection. I haven't needed to restore from backup yet, but I'm pretty confident that failure mode won't be a problem outside the immediate timeframe my phone happens to die.