Definitions

What is Time Based One Time Password (TOTP)? – Definition, and More

TOTP Definition

The TOTP process is an extension of the HOTP, which generates a unique password by taking the uniqueness of the current time.

TOTP token services depend on a physical device, rather than a telephone number.

In addition to increased security, TOTP provides benefits that include working without an Internet connection.

And also, it has compatibility with a variety of applications such as Google Authenticator, Microsoft Authenticator, and password managers.

Also Read: What Is APR (Annual Percentage Rate)? How Does It Work?

How is the time-based one-time password algorithm work?

  • The time-based one-time password algorithm uses the keyed hash message authentication code (HMAC) to calculate the time-dependent passwords.
  • A secret key agreed between the user and the system to log in and time information coordinated between the user and the system.
  • The Unix time, which counts the seconds since January 1, 1970, 00:00 UTC, serves as time information.
  • The number of seconds rounded to 30 seconds. The algorithm generates a hash value from this rounded number and the secret key.
  • It is shortened to a particular bit length and displayed using a modulo operation as a six or eight-digit decimal number.
  • If there is no sufficiently synchronized and precise time information available, the authentication fails.

What is the Difference between HOTP and TOTP?

  1. In addition to TOTP, the so-called HMAC-based One-time Password (HOTP) is another method for generating one-time passwords.
  2. To generate the one-time password to the secret key, it is not the rounded second value, but it uses an event-controlled counter.
  3. The counter increases by one for the generation of each new password. The counter on the server also increases after each successful authentication.
  4. Since the counters can diverge with this method and it cannot be synchronized, and the servers generally accept a number of one-time passwords.
  5. Only when the one-time password is outside the window does the authentication fail.

What is the Use of the TOTP algorithm for two-factor authentication?

TOTP often used to create a further authentication feature in the context of two-factor authentication.

  • It generates a unique hardware token or an app on the user’s smartphone.
  • Thanks to TOTP, the time-dependent one-time password can only be used for a limited time.
  • Since unauthorized persons can have a one-time password and it is valid for a short time, two-factor authentication via TOTP considers being extremely secure.
  • However, the secret key for generating the passwords must not disclose to unauthorized persons.

Also Read: What is Alexa? – Definition,Types, Privacy, and More

Also You can find more helpful resources at royalbeautyblog

Review What is Time Based One Time Password (TOTP)? – Definition, and More. Cancel reply

Kamran Sharief

I write about technology, marketing and digital tips. In the past I've worked with Field Engineer, Marcom Arabia and Become.com. You can reach me at kamransharief@gmail.com

Share
Published by
Kamran Sharief

Recent Posts

How to Compare and Choose Best Crypto Exchanges in 2022

It is difficult to engage in cryptocurrency trading. Using a crypto exchange is going to… Read More

December 8, 2022

Safe, high-quality Software based on modern solutions

System solutions are more complex components of a corporate system than separate Software; they are… Read More

December 7, 2022

5 Commonly Asked Questions About Pdf Document Converting

Many questions are asked about PDF document conversion, especially how to convert a PDF into another… Read More

December 7, 2022

How AR and VR Are Improving the Business World

Augmented and virtual reality technologies are steadily growing trends in the business world. Many companies… Read More

December 6, 2022

Is Converting PDF Documents on the Internet Safe?

Whether you're looking to save a PDF document on your computer, or you're looking to… Read More

December 5, 2022

LeoVegas Canada Review

The mobile-first strategy used by the operator, LeoVegas Canada, is a compelling alternative for an… Read More

December 5, 2022