Your Choice credentials are the login — there is no separate password for this app to store. They are used once to open a broker session and are never written to disk.
LoginTOTP → GetClientLoginTOTP → ValidateTOTP; Choice returns the OTP itself, so there is no authenticator app.Sessions are day-scoped, matching Choice's own — you will be signed out at end of day. Each user gets an isolated broker session; nobody sees anyone else's positions.