Implementing RFC 6238 TOTP Two-Factor Authentication With No External Libraries
How the Time-Based One-Time Password algorithm works, and how to decode Base32 and run HMAC-SHA1 with PHP's built-in functions.
Andi Pratama
11 Sep 2026