Google Authenticator is a software-based authenticator by Google. It implements multi-factor authentication services using the Time-based one-time password (TOTP; specified in RFC 6238) and HMAC-based one-time password (HOTP; specified in RFC 4226), for authenticating users of software applications.[2]