What is a HOTP Code?
Photo by
Erik Mclean
on
Unsplash
If you've been using our authenticator app, you're probably familiar with those 6-digit codes that refresh every 30 seconds to help keep your accounts secure. But you might have also come across something called "HOTP" and wondered what makes it different. Let's break it down!
HOTP vs. TOTP: What's the Difference?
Most authentication codes you use are TOTP (Time-based One-Time Passwords). These codes change automatically every 30 seconds based on the current time. It's like having a password that's constantly updating on its own.
HOTP (HMAC-based One-Time Password) works a bit differently. Instead of changing based on time, HOTP codes change based on a counter. Think of it like a ticket dispenser—each time you generate a new code, you're essentially "pulling" the next ticket in line. The code doesn't change until you specifically request a new one.
When Would I Use HOTP?
HOTP is less common than TOTP, but some services prefer it because:
It doesn't rely on your device having the correct time
You have more control over when codes change
It can work in environments where time synchronization is tricky
You'll know you need HOTP if the service you're setting up specifically mentions it or if your codes don't seem to expire after 30 seconds.
How to Use HOTP in Our App
Using HOTP codes is just as easy as regular codes:
Set it up: Scan or import a photo of the QR code from the service you're securing, just like you would for any other account
Generate a code: When you need a new code, simply long press on the account entry
Use your code: Enter the code on the website or app you're logging into
That's it! The main thing to remember is that HOTP codes won't refresh automatically—you'll need to long press to get your next code whenever you need one.

