2-Factor-Authentication using TOTP

To secure the university's IT services, two-factor authentication using TOTP (time-based one-time password) is used. This method represents a good compromise between security and user-friendliness. Furthermore, it is an open standard, allowing users to freely choose any TOTP-enabled application.

The URZ recommends the applications KeePassXC for desktop/laptop systems and FreeOTP for mobile devices (tablets and smartphones). KeePassXC is a full-featured password manager and FreeOTP is a pure TOTP application. These applications are documented in detail in this section. It is assumed that the software has already been installed.

The following terms are used in connection with TOTP:

• TOTP-Secret
  This is the secret key that is generated by a TOTP-protected application and must be stored in your TOTP-enabled application.
• TOTP-Code
  This is usually a 6-digit numerical code that is valid for a maximum of 30 seconds. This code is calculated based on the TOTP secret and the exact time.

Depending on your individual requirements, follow all or individual instructions.