I did something similar and just sent a link to Signal when IPhone friends and family SMS’d me, worked…eventually :) (am on Android)
As an Australian, either.do I. They are in Mastodon and I have pointed out that being in Australia should make them a no go for anyone.
Same thing with Boost, logging back in fixed it.
Boost was being weird, didn’t see the poat, logged out and logged back in and it worked again, then saw the post here :)
Paid for the ad free version seeing you’re actually updating it. Great app that I paid fir back in the Reddit days as well.
I swaped to Flauncher on my Shield as the Launcher. Need a few “do once” tricks to get there to/allow it though.
??? Theres a while bunch of loopholes they can exploit without having access to your phone, here’s must one.
https://www.netspi.com/blog/technical/web-application-penetration-testing/why-totp-wont-cut-it/
I do it the way you do it as well but am under no illusion it’s bomb proof.