A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 1 week ago (1 child)

why aren't these corporations locking down TOTP to restrict them to their own validator apps

But they do. There are TOTP implementations that have been intentionally modified to prevent using standard apps. I don't remember other examples right now, but I think Steam Guard is one.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 week ago

    I'm sure a lot of people (like myself) would refuse to install a special custom TOTP app just to be able to use one site. They're only hurting TOTP adoption by doing that, and thus increasing the amount of support resources they need to allocate to account hacking / hijacking.

    I'm sure there are other companies too willing to go against their economic interests for various reasons, but they're going to be in the minority.

  • source
  • parent