In simple terms: a TOTP authenticator app creates short-lived login codes using a secret key and the current time. The website and your phone calculate the same code independently, so your phone ...