TOTP (Time-Based One-Time Password) is a security feature used for two-factor authentication (2FA). It generates a unique, temporary password that is valid for a short period, typically 30 seconds to a minute, and is used alongside a traditional password for enhanced security.
Key Features:
- Time-Sensitive: The password changes at regular intervals, usually every 30 seconds.
- Secure: Each password is unique and can only be used once, making it resistant to replay attacks.
- Uses an Algorithm: Typically generated using an algorithm that combines a shared secret key and the current time.
Common Uses:
- 2FA Authentication: Often used in conjunction with a username and password to provide an extra layer of security for logging into accounts.
- Mobile Apps: Frequently implemented in apps like Google Authenticator or Authy to generate the one-time passwords.
In summary, TOTP enhances security by generating short-lived, one-time passwords that make it harder for attackers to gain access, even if they have a user’s main password.