I just did this to success. My biggest suggesting in this copy-paste is changing "Google Auth" to "TOTP authenticator". Do not endorse Google products when the open source alternatives like andOTP and pass-otp are great. It's bad enough Schwab is supporting the closed-source Symantec authenticator whose application is not available on GNU/Linux or BSD.