TOTP
Technology & Computing abbreviation · Cybersecurity
| Stands for | Time-based one-time password |
|---|---|
| Categories | Technology & Computing |
TOTP stands for Time-based one-time password, a cybersecurity abbreviation.
An algorithm that generates short-lived codes, usually six digits changing every 30 seconds, from a shared secret and the current time. Authenticator apps such as Google Authenticator, Microsoft Authenticator and Authy use TOTP.
Example: Scan the QR code with your authenticator app, then enter the current TOTP to finish enabling 2FA.
Usage notes
Standardized in RFC 6238 (2011) as an extension of the counter-based HOTP algorithm of RFC 4226. Because the phone and server compute codes independently, it works without a network connection. Device clocks must be roughly synchronized, so servers usually accept codes from adjacent time windows. The setup QR code encodes the shared secret and should never be shared.
Related abbreviations
More cybersecurity abbreviations
- SQLi – SQL injection
- SSL – Secure Sockets Layer
- SSO – Single sign-on
- SSRF – Server-side request forgery
- TLS – Transport Layer Security
- Tor – The Onion Router
- TPM – Trusted Platform Module
- TTP – Tactics, techniques and procedures
- UTM – Unified threat management
- WAF – Web application firewall
- WebAuthn – Web Authentication
- X.509 – X.509 (public key certificate standard)