First program on the page for docker:
Nothing better than having a 2FA generator in a webpage xD
This is truly a “Don’t you have phones” moment.
IMO this type of data should be on a locked down system like a smartphone or a non network connected type of PC with a screen. Not some local hosted website. Malware will not care!