Hacker News new | ask | show | jobs
by dns_snek 1502 days ago
> Authenticator apps, and SMS help them derive you have identity

How do they do that?

TOTP (i.e. authenticator apps) is a simple algorithm where the value is derived from a secret key and current time. It certainly doesn't verify anything about you.

1 comments

By making the initial TOTP secret different for everyone.