← Back to glossary

A client generating OTPs for MFA.

Definition

An authenticator app stores a shared secret and computes OTPs (e.g., TOTP/HOTP) locally, providing a possession factor during authentication flows.

In plain English A client generating OTPs for MFA.

Why this matters

Why it matters: Local OTP generation avoids SMS weaknesses and reduces exposure to interception and SIM-swapping.

Example

Example: TOTP codes displayed offline on a registered device.