Add TOTP Two-Factor to Your Own App: A Developer Guide
A framework-agnostic guide to adding RFC 6238 TOTP two-factor auth: generate a secret, build the otpauth URI, verify codes with a drift window, and stop replay.
Read more →Articles tagged “otpauth-uri”
All articles about otpauth-uri: 3 practical guides and tutorials from our free, privacy-first online tools.
Anatomy of a 2FA QR Code: The otpauth:// Key URI Explained
Dissect the otpauth:// Key URI a 2FA QR code carries: scheme, totp host, issuer:account label, and the secret, algorithm, digits, and period parameters.
Read more →
When Services Use SHA-256 or 8-Digit TOTP
RFC 6238 defaults to SHA-1, 6 digits, 30 seconds. Learn what happens when a service picks SHA-256 or 8-digit codes and why some apps generate wrong codes.
Read more →