Overview#

One-Time password or OTP is a password that is bounded by a single authentication session.

Often One-Time password is used with Multi-Factor Authentication as either Something You Know or in the case where a device or Authenticator App is used to provide the One-Time password as Something You Have.

One-Time password #

Some OTP standards include the

• One-Time Password System (RFC 2289)
• S-KEY One-Time Password System (RFC 1760),
• HMAC-based One-Time Password Algorithm (HOTP RFC 4226)
• Time-based One-time Password Algorithm (TOTP RFC 6238)

More Information#

There might be more information for this subject on one of the following:

• Authentication Method Reference Values
• Authentication intent
• Best Practices Password
• Cardholder Verification Method
• HMAC-based One-Time Password Algorithm
• LOA 3
• M-04-04 Level of Assurance (LOA)
• NMAS
• OTP
• One-Time Password System
• One-time password device tokens
• Passwordless SMS Authentication
• Phishing
• S-KEY One-Time Password System
• Short Message Service
• Time-based One-time Password Algorithm
• Transaction Authentication Number
• What To Do About Passwords
• Yubico
• Yubikey NEO

---

• [#1] - One-time password - based on information obtained 2013-04-10