Hacker News Reader

Absolutly not. It's one secret seed but you use the time to generate different One Time Passwords every 10 seconds, which means you never reuse passwords.

This would be the equivalent of having 2 passwords, one of which you change every-time you use it and it's fully random.

View on HN

So just to rephrase it to make sure I understand, it's more secure because even if the OTP is compromised, the entire system is not compromised, is that correct?

However, if the original secret is compromised (K), then could an attacker easily generate OTPs?

Reply on news.ycombinator.com