AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/secplus-totp-30-seconds

In TOTP (RFC 6238), what is the default time step for a one-time code?

Start playing free

  1. 5 seconds
  2. 30 seconds
  3. 5 minutes

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. IETF RFC 6238, TOTP: Time-Based One-Time Password Algorithm www.rfc-editor.org/rfc/rfc6238 Checked 2026-10-10.
  2. IETF RFC 6238, TOTP: Time-Based One-Time Password Algorithm www.rfc-editor.org/rfc/rfc6238 Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyOn which port do Kerberos servers (KDCs) listen for requests by default?Security & PrivacyYou sign in, and then the system decides which folders you may open. What is that second step?Security & PrivacyCapturing valid login data and sending it again later to impersonate a user is called what?

That's stuff everyone should know.