[cheald]

When they rolled it out, it was SMS-only. It still doesn't use TOTP - they've baked something into their mobile app that allows it to function as the second factor, rather than just supporting the same 2FA scheme that everyone else does.

[aroman]

Ah, I wasn't aware they didn't support TOTP; I only ever use sms based 2fa.