What TOTP is and how 2FA codes work

A practical guide to TOTP, one-time code generation, and safe token handling.

How TOTP works

TOTP uses a shared secret token and current time. The code refreshes every 30 seconds.

Why time sync matters

If device time is skewed, services can reject valid-looking codes.

Common use cases

TOTP protects logins for email, exchanges, control panels, and other accounts.