# OTP Policy

<figure><img src="https://lh7-us.googleusercontent.com/docsz/AD_4nXex1dIZBEfEy2RXOqi57WLOEXOREz18w2h3BADIDvMM6PsVvzXxUTrD969KnZehRyHIRNt-Jo-wdXRdETxLzruOp1ZrZnPr-luNAJRwnf-QnLtmbBK2fLKTIy9BKXKSd5jIN0I_d-WqtJUUqWp7Zo3YTibd5ZnuXTsPXiXNYU3usCbpON8YHg?key=0ECnkWiuLUYSWNiFTVoEqA" alt=""><figcaption></figcaption></figure>

In the OTP Policy section, you can configure various settings related to OTP (One-Time Password).

#### **OTP Type**

<figure><img src="https://lh7-us.googleusercontent.com/docsz/AD_4nXd7oIqvTeAIJ6B-QQ54aI9COdEPCpTWcAwBI-pZt-ctHA3G2zHfuYV2OMu5DYZnY-BNhWkVMHwPn21yMyReaK5Nq4G9RydUSoZaJNlhPOb3uT8koOguIlV3nGys8C9oENVW03PpHrCZVO6tP6HI9NnltN6SMt-RbJsr6EzARofbtTWeqRuwGRg?key=0ECnkWiuLUYSWNiFTVoEqA" alt=""><figcaption></figcaption></figure>

In this setting, you can choose the OTP Type—either [Time Based OTP](../../../../user-manual-ztrust-v2.0/key-terminologies#time-based-otp) or [Counter Based OTP](../../../../user-manual-ztrust-v2.0/key-terminologies#counter-based-otp)—by selecting your preferred option from the dropdown menu.

#### **OTP Hash Algorithm**

This pertains to the Hashing Algorithm type utilized for generating the OTP. ![](https://lh7-us.googleusercontent.com/docsz/AD_4nXcRREX6pNXj1od8Jtn2jqJ9C6EdFmH4-rkLlTh6wlavlwZkHvlP2bvn7y5_fki4uPUtGl-jO3c2Y2tQcrk8GT0XNBybxUkeSZYdAS7NaRuu_hCRczed8NT6D3vFztFuzV1mes5-qOJ6xl6ABwJqul-CqkSgWfKAbc3wK5p4cHXC51hx0AwDj5Q?key=0ECnkWiuLUYSWNiFTVoEqA)

You can select your preferred option from the dropdown menu.

#### **Number of Digits**

You can change this setting by selecting a different option from the dropdown menu.

<figure><img src="https://lh7-us.googleusercontent.com/docsz/AD_4nXdqgvJUC4l2_Usfc4Z-QBTfDviEttYzlRCZUxJ4tUWrGh7THqwkAMr0Ko-DNups6j-nDbnsscyM_2ojW-Yt28awxNJQBZb5RI2So6Z2qb50t47feghkxtt4K1zpFyexJTZ7XqmphPSQnjmJ2CPdYcnTarsf5KPU4XQ_UnqbfTaJbyrZdoCXpps?key=0ECnkWiuLUYSWNiFTVoEqA" alt=""><figcaption></figcaption></figure>

You can choose between 6 or 8 digits for the OTP length.

#### **Look Around Window**

<figure><img src="https://lh7-us.googleusercontent.com/docsz/AD_4nXdcWf1fhD7JwldK6vqbu2AQ6Wao4sGbQy4NyygHix8C5NCTpBRUWZJUxjy566ahEkTA4WvY4lYnMIxnrwrJJwsJY3H6EomewMi50Vt6gHNvl6VCZZ8vuWweG7VqNfKlcTrBQUDwJwRkT2vN35i1N7uSCktj3RD1M1lCifYJ3oFZJAesfyjs7ac?key=0ECnkWiuLUYSWNiFTVoEqA" alt=""><figcaption></figcaption></figure>

This setting refers to the intervals the server attempts to match the hash. It's a feature in ZTrust that addresses situations where the OTP generator or authenticator server's clock becomes out of sync.

It has a default value of 1 and can be modified as required.

#### **OTP Token Period**

The default value is 30 seconds, but it can be adjusted as required.

This represents the duration (in seconds) for which the OTP remains valid.

#### **Supported Applications**

It lists the applications that have been verified to be compatible with the current OTP policy.

#### **Reusable token**

This toggle button can be turned ON or OFF according to your needs.&#x20;

When enabled, the same OTP code can be reused after successful authentication.&#x20;

If disabled, the user cannot log in again using the same OTP code after successful authentication.

\
