According to https://twofactorauth.org/ Paypal supports software tokens for TFA, however I can only see how to activate it via SMS. Is the twofactorauth site wrong?
I would also like to know. I am wary of SMS-based authentication (aka two-step verification) after hearing of the horror stories of being able to spoof someone's number and get their texts and calls forwarded to them. In addition, I log into my PayPal account just about every day (sometimes several times, given that PayPal likes to log me out after a few minutes) and I'm about tired of waiting on the SMS code to arrive. Google offers codes for a TOTP app, why doesn't PayPal?
