Comment on 6 digit OTP for Two Factor Auth (2FA) is brute-forceable in 3 daysparentComments−seba_dos14yleak of valid usernames or email addresses...and passwords, because OTP is the second factor.
Comments
...and passwords, because OTP is the second factor.