forked from thijooree/android
TOTP Seed
What is a TOTP seed?
A TOTP (Time-based One-Time Password) seed, also called a secret key, is a short piece of text your bank gives you when you set up its authenticator. It usually looks like a string of capital letters and numbers such as JBSWY3DPEHPK3PXP, or comes inside a QR code as an otpauth:// link.
An authenticator app combines the seed with the current time to make a new 6-digit code every 30 seconds. Any app that has the same seed shows the same codes, so Thijooree can make your BML and MIB OTP codes without the bank's own app.
- Thijooree needs the seed to enable OTP-less Transactions.
- Thijooree can also the OTPs if you wanted to use official bank app or website along with Thijooree.
- To keep transactions secure, you can have Thijooree ask for your biometrics instead of an OTP.
Keep your seed private: anyone who has it can make your OTP codes.
How do I get my TOTP seed?
You get your seed in one of two ways:
- Set up the bank's authenticator again and copy the new seed when the bank shows it. See the Setup guides below.
- Export it from an authenticator app that already has it, such as Google Authenticator or Bitwarden. See the Export guides below.