3 ms·
Maybe I misunderstood the OP or the standard usage of the acronym OTP/TOTP is only for referring to 2FA tokens? I interpreted his question to mean a one-time-p
by godot 6y ago
Maybe I misunderstood the OP or the standard usage of the acronym OTP/TOTP is only for referring to 2FA tokens?
I interpreted his question to mean a one-time-password, not necessarily a numeric 2FA token, but a string password with ascii characters, with any length (or a reasonably long one at least), emailed or SMS'd to the user.
I don't have a great answer for OP other than, I've seen some big sites do it. For example, I never remember the password of my rarely-used Twitter account. Every time I have to log in, I use the OTP feature and get emailed a login link.
- theschmed 6y agoPassword resets are a great example of an almost universal usage of OTP, thank you. Of course, they deliberately discourage you from using that regularly, by making you set a new passphrase when you log in from a "magic link" sent by email.