A counter-based OATH method for one-time codes, as opposed to the time-based TOTP. Microsoft Entra ID supports only TOTP, not HOTP.
Also called HMAC-based one-time password.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains HOTP in context, with comparison tables and the common traps.
Terms in this definition
- TOTP
Time-based one-time password, an OATH standard. Each code is valid for a short window of 30 or 60 seconds and is produced either by an authenticator app (a software token) or by a physical hardware token.
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.
Related terms
- OATH tokens
Sign-in codes from the OATH TOTP open standard, generated by an authenticator app or by a hardware token (preview) and renewed every 30 or 60 seconds. A user can register up to five; OATH HOTP can't be used.