Generated code is not the same as in generator

  • Resolved erikhrast

    (@erikhrast)


    1 year, 9 months ago

    Hi, last night my WP sites was upgraded to last WP version 6.2.1.
    Then all of a suddon my OTP codes was not accepted… I disabled OTP authorization on server. Now my codes are generated different as in my mobile code generator. Why?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    Hi,

    The TOTP algorithm – https://en.wikipedia.org/wiki/Time-based_one-time_password – uses only two inputs to generate codes:

    1. The shared secret key (the thing that is encoded in the QR code when you set it up)
    2. The current time

    i.e. Any device that has both of those can calculate the current code.

    Assuming that nobody has changed your secret key on either the server or the device generating the code, then, one of those two (the webserver or the device) now has the incorrect time, and fixing that will make them agree on the codes again.

    David

    Thread Starter erikhrast

    (@erikhrast)

    It is working now.. maybe my hosting support fix it. Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Generated code is not the same as in generator’ is closed to new replies.