4 ms·
How accurate does the time have to be for TOTP to work? If the watch drifts a bit, will it no longer work? Compared to your phone which is synced with an NTP se
by yellow_lead 4y ago
How accurate does the time have to be for TOTP to work? If the watch drifts a bit, will it no longer work? Compared to your phone which is synced with an NTP server.
- petesergeant 4y agoUp to the authenticating service
- joshxyz 4y agoup to the service. some services allow up to 2 windows.
- himlion 4y agoAWS asks you to sync by inputting subsequent codes if it detects keys from the wrong time window.
- VTimofeenko 4y agoThe key lifetime may be other than the default 30 seconds, and IIRC the validator side may be configured to accept keys from N previous generations.
- account42 4y agoI wish all implementations would at least accept one previous generation. It sucks having to either wait for the next code or try to input before the timeout if it is close.
- lesuorac 4y agoI'm not sure I've ran into an implementation that doesn't. I used to wait for the code to rollover before entering it but honestly if you're not sure if the implementation accepts a previous code or now just use that time to try it and if it fails you still have like 45s to enter the current code.