Realistic risks (not fearmongering)
Screenshots create durable copies of TOTP codes and train teams to treat OTP as shareable content—increasing phishing success. They also spread to backups, search indexes, and compliance exports unpredictably.
Operations teams screenshot because it is fast. The fix is faster governed access—not more policy PDFs alone.
Mitigation: viewer access
MultiMFA TOTP viewers read rotating codes without copying images. Pair with shared MFA policy banning chat OTP.
