One Time Password

Identity Topic -2

Thenusan Santhirakumar
3 min readDec 22, 2020

When we try to do a crucial task in a software-based system, we may sometimes face giving a valid mobile phone number or email address to make the task to be successful. The particular application will send us a random password in numbers or letters or mixed of both through the given communication medium. The password is needed to be correctly entered back to the application by the user. Sometimes they may send token embedded links also to be verified. The one-time password(OTP) is also known as dynamic password.

Photo by Markus Spiske on Unsplash

An OTP (One-Time Password) is a dynamically generated numeric or alphanumeric string of characters that is used to authenticate and verify users before a transaction or a session in an app or website. OTP reduces fraud access for applications through the traditional username password-based authentication. Fraud attempts to catch the OTP is comparatively lower as OTP is valid for a particular time period.

One time passwords must be generated using high secure algorithms that must not be catchable or guessable by any kind of attackers. Several approaches are being used to create one time passwords.

  1. Simple methods such as transaction numbers can provide a way to create one-time passwords using simple algorithms.
  2. Using an algorithm to generate a new password based on the…

--

--

Thenusan Santhirakumar

MSc in IT @Deakin University | Ex- Full-Stack Engineer @WSO2 | Computer Science and Engineering Graduate @University of Moratuwa