I found a code by SMS or TOTP on a phone as a second factor of authentication to be a good solution for when you're using your computer to login to a website. Most people have a phone which can either receive a text, or can install an app.
But more people are using their phone to login to websites as well. If you then configure the two factor authentication on the same device, it kind of loses a big security advantage as it's all on the same device. Are there any best practices for this issue? Anyway to kind of restore the advantage you have when using both pc/phone?