What made you design it that the user has to give the passcode to the calling server and not the other way around like with TXT?
This way, temporary memorization of passcode is avoided in both cases. The passcode is always rendered to pixels (computer screen or phone screen).