Time-based One-Time Password (TOTP)

1. Time-Based One-Time Password (TOTP) Definition

A Time-Based One-Time Password (TOTP) is a time-sensitive passcode used for authentication purposes, typically as part of two-factor authentication (2FA). TOTPs are generated by an app or device using a shared secret key and are valid only for a short period (e.g., 30 seconds). TOTPs add an extra layer of security by ensuring that, even if a user’s password is compromised, access cannot be gained without the correct time-sensitive passcode.

2. Why Is TOTP Important?

• Enhanced Security: TOTPs add an extra layer of security, requiring users to provide a time-sensitive passcode in addition to their password to access systems or applications.
• Time-Limited Access: Since TOTPs expire after a short period, they are harder to steal or misuse, reducing the risk of unauthorized access.
• Compliance with Security Standards: Many regulatory frameworks require multi-factor authentication (MFA), including TOTPs, to ensure secure access to sensitive systems or data.
• Protection Against Phishing: Even if a user’s password is compromised, a TOTP protects against unauthorized access by requiring a second, time-sensitive factor for authentication.

3. Key Components of Time-Based One-Time Password (TOTP)

• Shared Secret Key: A shared secret key is used to generate the TOTP, ensuring that only the user and the system know the correct passcode.
• Time Sensitivity: TOTPs are valid for only a short period, typically 30 or 60 seconds, after which they expire and cannot be reused.
• Authentication Application: Users typically generate TOTPs through an authentication app, such as Google Authenticator or Authy, which generates the passcode based on the shared secret and current time.
• Multi-Factor Authentication (MFA): TOTPs are commonly used as part of MFA, requiring users to provide both a password and the one-time passcode to gain access.

4. Certinal eSign’s TOTP Features

• Two-Factor Authentication (2FA): Certinal integrates TOTPs into its authentication process, ensuring that users must provide both a password and a time-sensitive passcode for secure access.
• Time-Sensitive Passcodes: Certinal generates TOTPs that are valid for a limited time, ensuring that authentication is secure and tamperproof.
• Compliance with Security Standards: Certinal’s use of TOTPs meets global security standards across 70 countries, ensuring that access to sensitive systems and documents is protected.
• Audit Trail Documentation: Certinal tracks all TOTP-based authentication events in its audit trail, providing a record of when and how users accessed the system.

5. How to Use Certinal for Time-Based One-Time Passwords

1. Enable 2FA with TOTP: Use Certinal’s platform to enable two-factor authentication (2FA) using time-based one-time passwords for added security.
2. Generate a TOTP: Use an authentication app, such as Google Authenticator, to generate the time-sensitive passcode when logging into Certinal.
3. Authenticate Using the TOTP: Enter the generated TOTP along with your password to securely access Certinal’s platform and sign documents.
4. Track Authentication Events: Certinal’s audit trail records all TOTP-based authentication events, ensuring that access to documents is secure and verifiable.