TOTP (Time-based One-Time Password) generates short rotating codes from a shared secret and the current time, typically every 30 seconds. Authenticator apps and password managers store the secret after you scan a QR code.
Why prefer TOTP to SMS
SMS codes travel phone networks and can be targeted by SIM-swap attacks. TOTP needs no cellular signal once enrolled. Protect the secret � it is as sensitive as a password.
In AzAd Vault
Free includes up to 10 TOTP codes; Premium is unlimited. Google Authenticator migration is supported on platforms that ship it. See TOTP vs SMS and changelog for recent QR import fixes.
Secrets are the root of trust
Anyone with the TOTP secret can mint valid codes. Treat exports and QR images like passwords. When you leave a job or replace a phone, rotate TOTP on critical accounts rather than only deleting the app. AzAd Vault encrypts stored TOTP alongside other items under your master password.
Issuer labels and multiple accounts
When enrolling, name accounts clearly (“Work email” vs “Personal email”) so codes are not mixed under stress. AzAd Vault item titles and labels help. Free allows 10 TOTP entries — prioritize crown jewels first.
If codes drift after a migration, re-check device time and re-import using the fixed QR paths noted for Android 1.0.36 on the changelog.
Practical takeaway
Enroll, verify, store backup codes, delete QR screenshots. Prefer TOTP over SMS when both exist. Upgrade Premium if you need more than ten authenticator slots in AzAd Vault.
Related reading on azadvault.com includes the security page, blog guides, and companion glossary entries for Argon2id, AES-256-GCM, and zero-knowledge. AzAd Solutions ships AzAd Vault for Android, Windows, and Chrome with a concrete Free tier (500 items, 20 labels, 10 TOTP) and Play-billed Premium.