Infosec glossary entry

OTP

OTP:
One-Time Password

An One-Time Password (OTP) is a unique code that is generated for a single use, providing an additional layer of security during authentication processes. OTPs are typically used in conjunction with traditional passwords to implement a stronger security measure known as Two-Factor Authentication (2FA). When logging into an account or system, a user will first enter their regular password, after which they will receive a time-sensitive OTP via methods such as SMS, email, or an authentication app. This OTP must then be entered to gain access, ensuring that even if a password is compromised, unauthorized users cannot easily access the account without the OTP.

The primary advantage of using OTPs is their ephemeral nature; since they are valid for only a short period or a single session, they significantly reduce the risk of unauthorized access. For example, if a cybercriminal manages to obtain a user’s password, they would still need the corresponding OTP to successfully log in. This adds a critical layer of security, as the OTP is generated dynamically and is not reusable.


https://github.com/cloudsecurelab/security-acronyms

Related entries

By jean-christoph

February 18, 2025

authentication, identity management
Leave a Reply

Your email address will not be published. Required fields are marked

{"email":"Email address invalid","url":"Website address invalid","required":"Required field missing"}

this might interest you as well