# Time-based One-Time Password (TOTP)

## Summary

This page explains what TOTP is, how the 2FA flow works in Dotkernel Admin via [dot-totp](https://github.com/dotkernel/dot-totp), and where to go next to install it.

## Details

A **Time-based One-Time Password (TOTP)** is a security algorithm used as part of **two-factor authentication (2FA)** to protect against account attacks.

The mechanism is integrated into [dot-totp](https://github.com/dotkernel/dot-totp) to enhance security by requiring both a **password** and **an additional one-time code**.
Our implementation follows the industry standard of using an Authenticator app to generate temporary, unique 6-digit codes that change every 30 seconds.

## 2FA with TOTP Flow

Below is a simplified flow for the 2FA with a TOTP mechanism.

![totp-flow!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-flow.jpg)

## Next Steps

[Install 2FA with dot-totp](https://docs.dotkernel.org/admin-documentation/v7/tutorials/install-dot-totp/).

## FAQ

**Q: What is a Time-based One-Time Password (TOTP)?**

A: It's a security algorithm used as part of two-factor authentication (2FA) that generates temporary, unique 6-digit codes changing every 30 seconds, to protect against account attacks.

**Q: What does TOTP add on top of a password?**

A: It requires an additional one-time code generated by an Authenticator app, in addition to the regular password.

**Q: Where do I go to install TOTP in Dotkernel Admin?**

A: See [Install 2FA with dot-totp](https://docs.dotkernel.org/admin-documentation/v7/tutorials/install-dot-totp/).