What is a HOTP Code?

Adrian Reyes

2FA Studio

Oct 6, 2025

Adrian Reyes

2FA Studio

Oct 6, 2025

Adrian Reyes

2FA Studio

Oct 6, 2025

Purple Flower
Purple Flower
Purple Flower

Photo by

Erik Mclean

on

Unsplash

If you've been using our authenticator app, you're probably familiar with those 6-digit codes that refresh every 30 seconds to help keep your accounts secure. But you might have also come across something called "HOTP" and wondered what makes it different. Let's break it down!


HOTP vs. TOTP: What's the Difference?

Most authentication codes you use are TOTP (Time-based One-Time Passwords). These codes change automatically every 30 seconds based on the current time. It's like having a password that's constantly updating on its own.

HOTP (HMAC-based One-Time Password) works a bit differently. Instead of changing based on time, HOTP codes change based on a counter. Think of it like a ticket dispenser—each time you generate a new code, you're essentially "pulling" the next ticket in line. The code doesn't change until you specifically request a new one.


When Would I Use HOTP?

HOTP is less common than TOTP, but some services prefer it because:

  • It doesn't rely on your device having the correct time

  • You have more control over when codes change

  • It can work in environments where time synchronization is tricky

You'll know you need HOTP if the service you're setting up specifically mentions it or if your codes don't seem to expire after 30 seconds.


How to Use HOTP in Our App

Using HOTP codes is just as easy as regular codes:

  1. Set it up: Scan or import a photo of the QR code from the service you're securing, just like you would for any other account

  2. Generate a code: When you need a new code, simply long press on the account entry

  3. Use your code: Enter the code on the website or app you're logging into

That's it! The main thing to remember is that HOTP codes won't refresh automatically—you'll need to long press to get your next code whenever you need one.