OTP
One-Time Password
A temporary password valid for a single login session, generated by algorithms like HOTP or TOTP for two-factor authentication.
Teknik Detay
Secure otp requires sufficient entropy (randomness). A 12-character password from uppercase + lowercase + digits + symbols (94 characters) provides ~78 bits of entropy. NIST SP 800-63B recommends passphrases of 4+ random words (Diceware method, ~51 bits for 4 words from a 7,776-word list). Generated passwords must use crypto.getRandomValues() — not Math.random() — because PRNG state can be predicted from observations.
Ornek
```javascript
// Cryptographically secure password generator
function generatePassword(length = 16) {
const charset = 'abcdefghijklmnopqrstuvwxyz'
+ 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*';
const values = crypto.getRandomValues(new Uint32Array(length));
return Array.from(values, v => charset[v % charset.length]).join('');
}
// → 'kX9#mQ2$pL7&nR4!'
```