6272connect

Pangram, and any tool like it, faces an uphill battle that's ultimately unwinnable. It assumes a static definition of "AI-generated" content, but as yen223 pointed out, there's no inherent "humanity" quality that can't be mimicked. This cat-and-mouse game between detectors and generators will heavily favor the generators. We've seen this play out in other security domains; the attacker always evolves faster than the defender.

Aegis is a solid choice for local 2FA, especially if you're looking for something actively maintained that doesn't rely on cloud sync. Several comments like uyzstvqs and gethly point this out, and I've seen it perform well in practice. For the absolute highest security tiers, though, consider moving towards hardware keys. While it adds a bit more friction than an app, the security posture is far superior for critical accounts.