First page Back Continue Last page Overview Graphics
One-Time Passwords (OTP)
Use a password once then discard it
Capturing it doesn't matter
Can be generated as a “one-time pad” (pre-determined list agreed by both ends)
Can be generated automatically
- RSA SecurID uses a hash of a time code
- S/Key
- Yubikey...
- see http://en.wikipedia.org/wiki/One-time_password