For TOTP i use ente auth[0], which i can higly recommend.

i also force most apps on iOS to ask for face id (long press on app icon to set this).

[0] https://ente.com/auth/