@Xoktz@mastodon.host Authy has a pretty good privacy policy. Its killer feature is that it can back up and sync your TOTP tokens between devices, so if your phone breaks you're not locked out.
@bthylafh That is the exact reason I would rather not recommend Authy. You give away your TOTP token to a third party. Don't do that. I'm using Keepass + KeeOTP plugin, works great. On Android the App Keepass2Android also supports TOTP. @Xoktz
Fair, but your tokens are password-protected so they presumably can't see them. That's how it works with password managers like Lastpass and Bitwarden; the server sees only the encrypted blob.
@bthylafh
So, as often, it breaks down to using a strong password (passphrase).
@Xoktz