logoalt Hacker News

miladyincontrolyesterday at 8:11 PM0 repliesview on HN

Same reason I dislike SMS based 2FA, or worse SMS/email based 1FA codes.

You dont truly own your cell number or domain. Meanwhile passkeys are certainly hardware I own, likewise my TOTP codes are stored and calculated locally.