"- Are the HMAC keys stored or synced to the desktop?
No, nothing is stored in the desktop. Everything remains on your phone."
"- Is there a password protection similar to the keychain to access these passwords?
We store the pair phone details on the keychain. But this is only the phone bluetooth id etc."
"If my desktop is hacked into and a key logger has my password as they usually do, it will now also be able to copy these one time passwords at will and use it frequently to log into my account."
"- Are the HMAC keys stored or synced to the desktop? No, nothing is stored in the desktop. Everything remains on your phone."
"- Is there a password protection similar to the keychain to access these passwords? We store the pair phone details on the keychain. But this is only the phone bluetooth id etc."
"If my desktop is hacked into and a key logger has my password as they usually do, it will now also be able to copy these one time passwords at will and use it frequently to log into my account."
No, again nothing is stored on your computer.