TOTP

securitycryptography

Stands for: Time-based One-Time Password

A one-time code that changes every 30 seconds, used for two-factor auth.

Time-based One-Time Password (RFC 6238) derives a short code from a shared secret and the current time using HMAC, so authenticator apps and servers compute the same value independently. It is the basis of most app-based 2FA.

Also known as: totp

← All glossary entries