---
id: 7835
title: "Why TOTP Won’t Cut It (And What to Consider Instead)"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/why-totp-wont-cut-it/"
published_at: "2024-01-18T00:00:00Z"
tags: ["web-security", "authentication", "mfa", "brute-force", "2fa", "totp"]
phying_url: "https://phying.com/item/7835"
lang: en
---

# Why TOTP Won’t Cut It (And What to Consider Instead)

## Summary

NetSPI examines why TOTP codes no longer stop determined attackers, walking through a brute force scenario and recommending stronger 2FA alternatives to replace time-based one-time passwords.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-01-18T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/why-totp-wont-cut-it/
- **Phying News:** https://phying.com/item/7835