TOTP / Multi-Factor Authentication

TOTP (Time-based One-Time Password, RFC 6238) is the basis for authenticator apps like Google Authenticator, Authy, and 1Password. It generates a 6-digit code every 30 seconds using HMAC-SHA1 and a shared secret. Combined with a password, it forms the most widely deployed form of two-factor authentication (2FA).