Now for every login, I need to enter OTP, which is very annoying. No matter, I use password or biometric login, still need an OTP. Which is worthless because if someone is trying to do unauthorized login from my phone, he or she will have access to my phone and will receive the passcode in the same phone. What are you securing here? It make sense to ask for OTP every time in web login for security reason but in mobile app login... common... use common sense.