3 ms·
TOTP generates the codes on both the client and server sides. The user enters the client generated code and the server validates it. So if the time on the clie
by ncallaway 6y ago
TOTP generates the codes on both the client and server sides. The user enters the client generated code and the server validates it.
So if the time on the client device is wrong (perhaps it was manually set and not updated for daylight savings), then the server will disagree with what the code should be.