Sorry, but you're just not getting the point. If TOTP is enabled in your PayPal account, you are asked for TOTP on EVERY login on EVERY device, on both app & web. If you have biometric set up in the app, you are still asked for TOTP. If you login on the desktop using a passkey, which you authenticate biometrically on your phone, you STILL have to enter a TOTP. This is insane. If you authenticate biometrically, then there is no need to also require TOTP. I have several banking apps, all of which require some form of multi-factor for initial login, but once biometric is enabled, that's all that's required. I see no reason why PayPal should imagine they require tighter and less convenient security than a bank! Whoever at PayPal is responsible for security clearly doesn't properly understand the concepts of OTP and biometric authentication. Please learn how to do it, and adopt industry standard practice.
... View more
