OTP Codes (TOTP)
An OTP (One-Time Password) code is a numeric code used only once, valid for a short time window, used as a second authentication factor alongside a password.
An OTP code is a one-time code generated from a secret shared between the service and the user's device. The most common variant today is TOTP (Time-based One-Time Password, defined in RFC 6238): the code is generated by combining the secret with the current time, so it automatically changes every 30 seconds, with no internet connection required.
TOTP codes are commonly used as a second authentication factor (2FA/MFA): even if an attacker steals an account's password, they would also need the TOTP secret (usually stored in an authenticator app or a password manager) to complete sign-in.
V4ult lets you store OTP codes as one of the vault's item types, alongside passwords, cards, identities and secure notes. Like the rest of the vault's content, OTP secrets are encrypted on-device before syncing.
Advantages
- Adds a layer of security even if the password is stolen
- Doesn't require an internet connection to generate (in its TOTP variant)
- Widely supported by online services
Related
Frequently asked questions
What does OTP mean?
One-Time Password: a numeric code used only once, valid for a short time window, commonly used as a second authentication factor.
What is TOTP?
Time-based One-Time Password (RFC 6238): a variant of OTP where the code is generated by combining a shared secret with the current time, changing automatically every 30 seconds.
Does V4ult let you store OTP codes?
Yes. V4ult supports OTP codes as one of the vault's item types, encrypted on-device like the rest of its content.