> For the complete documentation index, see [llms.txt](https://docs.vida.id/identity-stack/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.vida.id/identity-stack/authentication/authentication-factors/totp-time-based-otp-api.md).

# TOTP ( Time based OTP) API

**VIDA’s TOTP-based APIs enable secure, time-bound credential provisioning and user authentication through authenticator apps such as Google Authenticator, Microsoft Authenticator, and other TOTP-compatible tools.**\
By relying on a shared secret and current time, TOTP eliminates the need to store or transmit static passwords. This approach greatly reduces the risk of credential theft through phishing, replay attacks, or credential stuffing. Because the OTP is valid only for a short period (typically 30 seconds), even if intercepted, it becomes useless shortly after. TOTP is widely used as a second factor (2FA) to strengthen authentication for logins, high-value transactions, and sensitive operations.