this post was submitted on 26 Aug 2025
1050 points (98.8% liked)
memes
17847 readers
2059 users here now
Community rules
1. Be civil
No trolling, bigotry or other insulting / annoying behaviour
2. No politics
This is non-politics community. For political memes please go to !politicalmemes@lemmy.world
3. No recent reposts
Check for reposts when posting a meme, you can only repost after 1 month
4. No bots
No bots without the express approval of the mods or the admins
5. No Spam/Ads/AI Slop
No advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.
A collection of some classic Lemmy memes for your enjoyment
Sister communities
- !tenforward@lemmy.world : Star Trek memes, chat and shitposts
- !lemmyshitpost@lemmy.world : Lemmy Shitposts, anything and everything goes.
- !linuxmemes@lemmy.world : Linux themed memes
- !comicstrips@lemmy.world : for those who love comic stories.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
TOTP ≠ MFA.
The purpose of TOTP is to use 1-time codes instead of (or in addition to) passwords, and doesn't require multiple devices.
The purpose of MFA is to ensure the user uses multiple devices to log in. In practice, MFA isn't usually implemented correctly, as it only requires a phone and no other device to log in, so it's not true MFA. MFA is sometimes implemented with RFC 6238 (TOTP), but for example getting a text message or email with a log-in code is not that.
Your password manager should use a secure password so that attackers can't get into it. It's more secure than a phone, which often use few-digit passwords or, god forbid, fingerprints or face scans to unlock.