The TOTP QR Code Is a Secret-Enrollment Ceremony
Scanning the QR code transfers long-lived secret material; it should be treated more carefully than an ordinary setup screen.
Scanning the QR code transfers long-lived secret material; it should be treated more carefully than an ordinary setup screen.