There may be situations where the user connects in a semi-trusted device and don’t want to let some secondary authentication token, e.g. when s/he uses a public library computer or a colleague’s computer. For instance it happened to me recently during a editathon where I had to use a public library computer (the WiFi was too secure and not available to visitors). Of course, a private browsing is preferable in this situation, when available.

If such a feature is implemented with a secondary token saved during the login process, there should be a way to discard it:

• either with a checkbox when entering the TOTP code (opt-in or opt-out to be decided),
• either with a "hard logout" to clear all tokens during logout.

Another process would be a button in the preferences to voluntarily declare the current device as trusted.

@Seb35 I agree. The implementation of "trusted" devices should include an
option to remove a trusted device. Thank you for listing out how the
feature can be implemented.