I'd call this 7 lines rather than 20. The rest is function definition and argument parsing. But really it should be just 1: pyotp.TOTP('base32secret3232').no

I'd call this 7 lines rather than 20. The rest is function definition and argument parsing. But really it should be just 1: pyotp.TOTP('base32secret3232').now() Why is this relevant? Because it's inadvisable to write security related software if you're not prepared to take on the full range of possible problems that introducing another security library brings (CVEs, supply chain security, etc.). The adage that doing security right requires doing everything right. Doing security wrong only takes 1 thing.