New posts in Totp

How are one-time password generators like Google Authenticator different from having two passwords?

Is accepting the current and the previous one-time password a bad practice?

How many known time/result combinations does it take to guess a HOTP/TOTP secret?