One time passwords are designed as single use passwords which expire after use. They are often more secure than single factor authentication methods such as username-password (something the user knows) due to their single use which makes replay attacks impossible
Questions tagged [one-time-password]
594 questions
129
votes
3 answers
Google Authenticator implementation in Python
I am trying to use one-time passwords that can be generated using Google Authenticator application.
What Google Authenticator does
Basically, Google Authenticator implements two types of passwords:
HOTP - HMAC-based One-Time Password, which means…
Tadeck
- 132,510
- 28
- 152
- 198
57
votes
12 answers
Automatic OTP verification in iOS?
Is there any way to access data from iPhone inbox(SMS) to ios application to do automatic OTP verification like the one in Android? I shall be grateful for your help.
Rinshad Kammath
- 571
- 1
- 4
- 3
54
votes
9 answers
OTP (token) should be automatically read from the message
I am working on an Android App, in which the server sends an OTP and the user needs to enter this OTP in the App, to SignUp for my App. What I want is, that my App should be able to automatically read the OTP sent by the server. How can I achieve…
user1903022
- 1,075
- 1
- 13
- 19
39
votes
1 answer
How Do Hardware Token Devices work?
Recently, my bank sent me this tiny device that generates a unique code that must be used when performing online transactions, all the device does is generate this unique code when I press a particular white button and it doesn't look like it…
Feyisayo Sonubi
- 1,052
- 5
- 15
- 27
24
votes
6 answers
How to auto fetch OTP, if we use multiple text fields
I know that if we want to auto fetch the OTP(if we use single textfield) we need to use
otpTextField.textContentType = .oneTimeCode
But, If we use multiple textfield(According to following image)
how should we achieve this ?
Bhanuteja
- 771
- 2
- 8
- 18
24
votes
2 answers
Generate a 10-digit TOTP password with a certain key
This problem is related to TOTP as specified in RFC6238 here: https://www.rfc-editor.org/rfc/rfc6238#section-1.2.
I am to implement the RFC6238 to generate a 10-digit TOTP password, which will be used in a POST request later on. The sample input and…
Nicholas Sadjoli
- 375
- 1
- 3
- 11
16
votes
5 answers
How to get OTP from SMS - autofill
I want to catch or read OTP of SMS messages automatically. I did some tests like this code :
import 'package:flutter/material.dart';
void main() {
runApp(MyApp());
}
class MyApp extends StatelessWidget {
// This widget is the root of your…
khaled mohammad
- 385
- 1
- 3
- 14
15
votes
4 answers
Can I Auto read OTP on Mobile Browsers?
I am working on auto reading a login OTP on a mobile browser. My web application is built in Angular 7.
Once the user clicks on login, an OTP is sent via AWS to the user's mobile with a 6 digit code.
I have looked up Google's SMS Retriever API but…
Varun Joshi
- 599
- 2
- 9
- 24
15
votes
11 answers
How to generate OTP Number with 6 digits
What is an OTP number in a login authentication system? Is there any specific algorithm for generating OTP numbers using java (android). Or is an OTP something like random number? How can this be achieved, with optimization.
Android Developer
- 223
- 1
- 2
- 6
14
votes
3 answers
Generating hash string for google sms retriever api - 'xxd' is not recognized as an internal or external command
After the google's new policy regarding SMS and Call log permissions, I am trying to implement SMS retriever API for my android application.
The tutorial seems easy but I found a problem while creating/generating hash for the same.
When I…
Khan Sharukh
- 1,151
- 12
- 21
14
votes
4 answers
Generate secret code for password reset
I'm doing a module which allow users to reset password. I noticed how most websites they provide a confirmation link which contain query string that has a unique hash.
My question is: How can I generate this unique hash each time the same user…
chrizonline
- 4,779
- 17
- 62
- 102
14
votes
2 answers
RFC4226 HOTP Java Implementation
I tried to copy the HOTPAlgorithm.java codes (HOTPAlgorithm.java) and compared it against the official HOTP RFC 4226's sample implementation (RFC4226 Page 27) found on Page 27 of the official RFC4226 document. Both the HOTPAlgorithm.java and the…
gsunnic
- 321
- 4
- 9
13
votes
2 answers
TOTP Base32 vs Base64
Every TOTP implementation (even FreeOTP by RedHat) I find uses Base32 encoding/decoding for its generated secret.
Why is Base64 not used, since Base32 uses roughly 20 % more space and its main advantage is, that it is more human-readable? It is not…
Leth
- 133
- 1
- 5
13
votes
2 answers
Autofill OTP to the TextField when I receive message iPhone app
While registering from my app I was sending OTP to the registered mobile number I want to retrieve that OTP in my app without opening SMS app...When the user received OTP message I need to display that OTP here ...How can I achieve this in iOS? I…
user1986984
- 141
- 1
- 1
- 10
10
votes
3 answers
Android one time password (OTP) user registration/opening account
I want to implement OTP functionality in my android application.
In this application, after signup user will receive one time password key. After verifying OTP, user will be able to register/open account successfully by using that OTP. What i need…
sachin110011
- 137
- 1
- 2
- 6