Skip to content

Time-Based One-Time Password (TOTP)

What is Time-Based One-Time Password (TOTP)?

A temporary passcode generated by an algorithm that uses the current time as one of its factors. TOTP is commonly used in multi-factor authentication applications such as Google Authenticator and Microsoft Authenticator.

Information Security

Frameworks that govern time-based one-time password (totp)

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on time-based one-time password (totp)

Requirements naming time-based one-time password (totp) across this standard, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication ensures the validity of the claimed identities of the entities participating in communication (e.g.

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →

Questions people ask about time-based one-time password (totp)

What is Time-Based One-Time Password (TOTP)?
A temporary passcode generated by an algorithm that uses the current time as one of its factors. TOTP is commonly used in multi-factor authentication applications such as Google Authenticator and Microsoft Authenticator.
Why is Time-Based One-Time Password (TOTP) important for compliance?
Time-Based One-Time Password (TOTP) is a key concept in Information Security. Understanding time-based one-time password (totp) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Time-Based One-Time Password (TOTP)?
Time-Based One-Time Password (TOTP) appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications. Across these standards we have identified 1 control that names it directly, each linked to the control text on the compliance platform.
Where can I learn more about Time-Based One-Time Password (TOTP)?
Explore our compliance framework pages to see how time-based one-time password (totp) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Time-Based One-Time Password (TOTP) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.