In this app, you can generate one-time passwords using your device and PIN for secure two-factor authentication. Includes features like secret key generation through shaking and password validity based on short time frames.
AppRecs review analysis
AppRecs rating 2.0. Trustworthiness 45 out of 100. Review manipulation risk 29 out of 100. Based on a review sample analyzed.
★★☆☆☆
2.0
AppRecs Rating
Ratings breakdown
5 star
9%
4 star
27%
3 star
9%
2 star
18%
1 star
36%
What to know
⚠
Mixed user feedback
Average 2.5★ rating suggests room for improvement
About mOTP - mobile OneTimePasswords
This application lets you generate One Time Passwords that are used for a more secure authentication (two-factor) - instead of having to enter a static password the iPhone plays the role as a "security token" that generates passwords that are valid only one time.
The authentication mechanism is based on two factors:
- the token device (i.e. mOTP-Application) and
- a PIN
Since the generated passwords are only valid for a very short time - it is of no use for a possible attacker.
Moreover the passwords can only be generated with a hold of the PIN as well as the token device.
Note:
- the server you want to log onto also needs to implement the OTP-algorithm, you need to configure your "shared secret/PIN" there
- the secret key is generated using random by shaking your iPhone :)
- the algorithm uses MD5-hashing
- compare this solution with "Mobile-OTP" Midlet solution on http://motp.sourceforge.net/- also free server components to be used e.g. as PAM can be found there.
- the clocks of your iPhone and your Server have to be in sync
- the algorithm can also be used for implementing a challenge-response authentication i.e. the PIN is not fixed but a random number is provided to you by the server at the login prompt.
The authentication mechanism is based on two factors:
- the token device (i.e. mOTP-Application) and
- a PIN
Since the generated passwords are only valid for a very short time - it is of no use for a possible attacker.
Moreover the passwords can only be generated with a hold of the PIN as well as the token device.
Note:
- the server you want to log onto also needs to implement the OTP-algorithm, you need to configure your "shared secret/PIN" there
- the secret key is generated using random by shaking your iPhone :)
- the algorithm uses MD5-hashing
- compare this solution with "Mobile-OTP" Midlet solution on http://motp.sourceforge.net/- also free server components to be used e.g. as PAM can be found there.
- the clocks of your iPhone and your Server have to be in sync
- the algorithm can also be used for implementing a challenge-response authentication i.e. the PIN is not fixed but a random number is provided to you by the server at the login prompt.
