one time password

[Darkom]

im confused
one time password is mend to use one time for security reasons but why do i have to add the OTP every time i log in?

[JagerForrester]

The OTP changes every time you log in, making it harder for those who don't own your account to steal your account

[Norbi]

Sounds like you didn't quite understand the function of OTPs, Darkom. Here you go.

A one-time password (OTP) is a password that is valid for only one login session or transaction. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords. The most important shortcoming that is addressed by OTPs is that, in contrast to static passwords, they are not vulnerable to replay attacks. This means that a potential intruder who manages to record an OTP that was already used to log into a service or to conduct a transaction will not be able to abuse it, since it will be no longer valid.

[Reiterpallasch]

Because the client isn't smart enough to understand that if the IP you're being logged in from doesn't change, that there's no reason to need to put in the one time password again. You know, unless the RMT physically break into your house or something.

That said, as session IDs never expire, somebody can hack your account and log it in with neither your password nor one time password from the other side of the world any time they want, because SECURITY!

[Darkom]

thanks for the answer and sorry it took so long to reply
i had to RMA my H80i bc of thread problems and had to wait to get another cpu cooler