Convenience vs security I prefer the convenience of having my TOTP synced through my nextcloud (via keepass file, or iPhone user with passwords for nextcloud app) The key for me having 2FA is only to minimize damage of fishing (only 30s time so evil entity must be ready upon getting the auth data) if ghey crack my nextcloud (behind reverse proxy only available by VPN) and after that my keepass file, well, in that case I’d be fucked. But I take that risk.