4 ms·
Lord, I hope there aren't apps trying to use TOTP offline. TOTP works by using a shared secret between user and service. This secret and the current time are us
by xhzkdnzhzjdkri 8y ago
Lord, I hope there aren't apps trying to use TOTP offline. TOTP works by using a shared secret between user and service. This secret and the current time are used to generate a code.
All parties involved must have the secret (this isn't public key crypto).
That means an app that can accept TOTP offline has the secret stored locally where it can be extracted.