TOTP & Security Key MFA

I've enabled TOTP and Security Key (yubikey) MFA on my account. When I log in on the site, I can only use the security key option. Is that by design, or should TOTP still be an option?