Can you elaborate on the threat model here? Having the second factor be stored on the same device you're entering your password on, protected by a password (another example of something-you-know), seems to counteract most of the benefits of having TOTP.
I think its largely about protection from remote attacks.
Its a kind of "only allow logins from this device". This doesnt solve all problems definitely, but for some of us there is zero practical danger from our location and much higher danger from geographically remote locations
3 comments
[ 3.0 ms ] story [ 20.2 ms ] threadIts a kind of "only allow logins from this device". This doesnt solve all problems definitely, but for some of us there is zero practical danger from our location and much higher danger from geographically remote locations