RFC DocumentsRFC 6238 - TOTP: Time-Based One-Time Password Algorithm5. Security ConsiderationsOn this page5. Security Considerations5. Security Considerations 5.1. General 5.2. Validation and Time-Step Size