How TOTP Authentication Works: RFC 6238 End to End
How TOTP two-factor codes work: the shared base32 secret, time steps, HMAC, RFC 4226 dynamic truncation, and the drift windows servers use to verify.
Read more →Articles tagged “authenticator-app”
All articles about authenticator-app: 4 practical guides and tutorials from our free, privacy-first online tools.
Lost Phone With 2FA: Every Recovery Option Explained
Lost, stolen or wiped the phone holding your authenticator? Here is how backup codes, cloud sync, saved secrets and account recovery get your 2FA back.
Read more →
Migrate Google Authenticator to Another App: The Reliable Way
Google Authenticator's export QR is a proprietary otpauth-migration blob, not a standard otpauth URI. Learn the reliable re-enrolment route to move accounts.
Read more →
When Services Use SHA-256 or 8-Digit TOTP
RFC 6238 defaults to SHA-1, 6 digits, 30 seconds. Learn what happens when a service picks SHA-256 or 8-digit codes and why some apps generate wrong codes.
Read more →