TOTP: Time-Based One-Time Password Algorithm

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 16
Abstract: This document describes an extension of the One-Time Password (OTP) algorithm, namely the HMAC-based One-Time Password (HOTP) algorithm, as defined in RFC 4226, to support the time-based moving factor. The HOTP algorithm specifies an event-based OTP algorithm, where the moving factor is an event counter. The present work bases the moving factor on a time value. A time-based variant of the OTP algorithm provides short-lived OTP values, which are desirable for enhanced security. The proposed algorithm can be used across a wide range of network applications, from remote Virtual Private Network (VPN) access and Wi-Fi network logon to transaction-oriented Web applications. The authors believe that a common and shared algorithm will facilitate adoption of two-factor authentication on the Internet by enabling interoperability across commercial and open-source implementations. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date: 2011-05-01
Status Note: Informational
DOI: 10.17487/RFC6238
Link: https://doi.org/10.17487/RFC6238
Author(s): David M'Raihi
Salah Machani
Mingliang Pei
Johan Rydell
Keyword(s): OTP, OATH, HOTP, Two Factor Authentication, Strong Authentication

Latest version of IETF RFC 6238

Document Versions — IETF RFC 6238

▶ IETF RFC 6238 (2011-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST FIPS 180-3 [Withdrawn]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4226 [Active*]

Bibliographic Reference(s)

Coron, J. and D. Naccache, "An Accurate Evaluation of Maurer's Universal Test", LNCS 1556, February 1999, < http://www.gemplus.com/smart/rd/publications/pdf/ CN99maur.pdf >. EXTERNAL
Wikipedia, "Unix time", February 2011, < http://en.wikipedia.org/wiki/Unix_time >. EXTERNAL
IETF RFC 4301 [Active, Amended*]
IETF RFC 5246 [Superseded*]
IETF RFC 6030 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6238.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6238, TOTP: Time-Based One-Time Password Algorithm. Available at https://doi.org/10.17487/RFC6238

Snippet:

IETF RFC 6238, TOTP: Time-Based One-Time Password Algorithm. Available at https://doi.org/10.17487/RFC6238

HTML (ISO 690 compliant)

Preview:

IETF RFC 6238, TOTP: Time-Based One-Time Password Algorithm. Available at https://doi.org/10.17487/RFC6238

Snippet:

<span class="citation"><cite>IETF RFC 6238</cite>, TOTP: Time-Based One-Time Password Algorithm. Available at <a href="https://doi.org/10.17487/RFC6238" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6238</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6238, TOTP: Time-Based One-Time Password Algorithm
doi: 10.17487/RFC6238
url: https://doi.org/10.17487/RFC6238

Snippet:

<li>
<cite id="bib-rfc6238">IETF RFC 6238</cite>, TOTP: Time-Based One-Time Password Algorithm
<span class="doi">10.17487/RFC6238</span>
</li>

Referenced By

IETF RFC 9930 [Active*]