Glossary term
What is TOTP (Time-based one-time password)?
TOTP stands for Time-based one-time password.
The 6-digit code from an authenticator app (RFC 6238). It comes from a shared secret and the current 30-second time step, using HMAC.
Learn it properly · Security for DevelopersLesson 3: Passwords and Login: Hashing, Sessions, MFA and Rate LimitsWhy you never store passwords, hashing with a salt (scrypt and Argon2), safe sessions and JWT mistakes, password reset flows, MFA, and stopping brute force.