Short version

​

Description

A time-based one-time password (TOTP) is a temporary passcode, generated by an algorithm, for use in authenticating access to computer systems. The algorithm that generates each password uses the current time of day as one of its factors, ensuring that each password is unique. One of the great advantages of TOTP is that the device that generates the passcode and the device that accepts the passcode don’t need to be connected to each other. The device that generates the passcode doesn’t even need a network connection to operate. TOTP is considered a straightforward way of addressing different strong authentication regulations and security concerns. The device that generates the passcode is considered “something you have” and can be used as a second authentication factor on top of a password (something you know) or biometrics (something you are).

There are two main approaches to TOTP—hardware tokens and software tokens. Hardware tokens are standalone devices from specific vendors that present the passcode on the device. Software tokens are usually embedded in a mobile application and presented on the mobile phone. We use software tokens.

In order to have a secure transition to software token setup, we require you to enter your credentials again. This will ensure that the person performing the setup is the owner of the account.