What?! This is an online method? Why don't people just use Google Authenticator? It's totally offline, on both ends.