
A time-based one-time password (TOTP) is an algorithm that is used to generate a randomized one-time password (OTP) that is time sensitive and only lasts until the next code is generated, which often occurs every 30 seconds. TOTP is an extension of the HMAC-based one-time password (HOTP) algorithm, which are both deployed as security mechanisms to prevent human error and malicious actors from stealing sensitive information. TOTPs are leveraged by numerous two-factor authentication (2FA) systems, such as Google Authenticator, and allow users to securely log into websites or account-based services on their computer or mobile device.