MIRACL Trust OTP

MIRACL Trust OTP is an addition to the standard MIRACL Trust authentication flow for use cases that don’t support direct integration, e.g. older networking equipment, VPN software and industrial machinery. As the name suggests, authentication is established using a one-time password (OTP).

Despite the name, one-time passwords have very different security characteristics from common passwords. The main difference between the two is that OTPs are short-lived - they are generated as a product of strong authentication and can be used only once and in a short amount of time after their creation. These characteristics make them resistant to all attacks typical for standard passwords.

To authenticate to your service provider, follow these steps.

  1. Open the OTP generation link provided by your service provider. It should look like this:

    https://api.mpin.io/otpgen?client_id=grnzkh8yaba3i
    

    This link is only an example. Please check with your service provider for the correct link.

  2. Register your device for a User ID before you can generate an OTP. You can skip this step if you have already done it.

  3. Authenticate with your PIN. You are issued an OTP.

    otp

    OTP screen.

  4. Use the OTP in the authentication prompt for your service provider.

    The OTP is deactivated when it expires. When this happens, you need to generate a new one. You can do that by clicking Retry on the screen that opens when the OTP expires.