What is TOTP and what do I use it for?

TOTP stands for Time-based One-time Password Algorithm. This is a procedure for two-factor authentication. With this method, a QR code is displayed on an application page after 2FA has been activated using a time-based password. This code must be scanned with a hardware TOTP generator or via a software solution. The 2fa is now activated using TOTP. A field for entering the code now appears on this application page each time you log in. This is displayed using the TOTP hardware device after selecting the page on the device. The user now has 30 seconds to enter this code on the page. Technically, it is based on a cryptographic hash function in which a key is calculated between the sender and recipient. With a software solution, no additional hardware token is required. This software solution can be mapped via an app for smartphones, tablets or notebooks. Corresponding apps can be downloaded from app stores. However, the clear recommendation is a hardware TOTP device. It is much more secure as it is a stand-alone device without an internet connection.

What are the advantages of TOTP?

• Open standard and free from patents
• The most secure 2fa method with physical hardware, as the device cannot be attacked

What are the disadvantages of TOTP?

• The code is only valid for 30 seconds, after which a newly generated code must be entered