OTP app for iPhone and iPad
Developer: John Hitchins
First release : 06 Jul 2012
App size: 2.5 Mb
OTP is an easy to use generator for One Time Passwords and supports RFC2289, RFC4226 (HOTP) and RFC6238 (TOTP) based one time passwords.
OTP is compatible with Authenticator which is being adopted by many popular sites around the internet.
Features -
* Quickly generate One Time Password responses to appropriate challenges
* Save regular host details to speed up the generation process
* Pass codes and secrets are stored securly in the iOS Keychain
* Copy generated response to the clipboard
OTP Pro available as an InApp purchase adds the following -
* Removes the banner adds
* Allows sharing of RFC2289 OTPs via email and messages
* Introduces a custom URL scheme to allow issuing challenges and responses for RFC2289 OTPs
For RFC2289 OTPs, to quote from the RFC -
"The [One Time Password authentication system] uses a secret pass-phrase to generate a sequence of one-time (single use) passwords. With this system, the users secret pass-phrase never needs to cross the network at any time such as during authentication or during pass-phrase changes. Thus, it is not vulnerable to replay attacks. Added security is provided by the property that no secret information need be stored on any system, including the server being protected."
Server side implementations for RFC2289 One Time Passwords are readily available on the internet and included in most Linux distributions. Implementing such a system can provide an additional level of security, particularly where logging into servers across the public internet.