
vew88 (vew88) asked a question.
Hello everyone,
We have verified that mobile codes in Okta Verify do work to authenticate users when the mobile device is offline. However we were wondering, how are these codes generated? Is it done through the Time-Based One-Time Password (TOTP) protocol or does Okta use some other kind of protocol for this purpose?
Thank you.
Davide

Hello @vew88 (vew88)
Okta Verify allows you to login two ways.
One way is by entering the 6 digit code that is displayed. Okta Verify will rotate through codes every 30 seconds, which is how One-Time Passcode Tokens work. When you log in, you need to enter the most recent code displayed, and you will be able to successfully log in.
The reason for this code change is to make sure that only you have access. The code is generated using an algorithm that is unique to your device. The codes are generated automatically and do not require an internet connection, therefore they do not use any internet data. The codes are also generated at launch, so it will not run in the background and continue to generate codes if the application is not running.
The second is by approving a Push Notification that is sent to your phone. The notification will only be sent to your phone, so we're able to confirm the request came from you.
Let us know if this helps!
Regards,
Natalia
Okta Inc.