That makes a lot of sense. And on the password manager, you have to click through the “use password on new website?” security dialog so often it becomes a nuisance warning and wouldn’t protect you from a phishing website, since you’re so used to clicking through it.
Phishing isn’t just over the phone. A phishing website that’s imitating say a bank website is just as easy to get the TOTP than it is the password.
That makes a lot of sense. And on the password manager, you have to click through the “use password on new website?” security dialog so often it becomes a nuisance warning and wouldn’t protect you from a phishing website, since you’re so used to clicking through it.