Security
security
authentication
What is TOTP (Time-Based One-Time Password)?
Definition
TOTP generates short-lived one-time passwords based on a shared secret and the current time. The algorithm (RFC 6238) produces a new 6-digit code every 30 seconds. Google Authenticator and Authy use TOTP for two-factor authentication.
Why It Matters
TOTP is the most widely used second factor for MFA. It works offline (no SMS needed), is supported by most services, and is more secure than SMS-based 2FA. Developers implement TOTP for user authentication using libraries like pyotp.