Editing One-time password (section)

=== Soft tokens ===
[[File:Aegis Authenticator 3.2 TOTP screenshot.png|thumb|Example of [[Software token|soft token]].]]
On smartphones, one-time passwords can also be delivered directly through [[mobile app]]s, including dedicated authentication apps such as [[Authy]] and [[Google Authenticator]], or within a service's existing app, such as in the case of [[Steam (service)|Steam]]. These systems do not share the same security vulnerabilities as SMS, and do not necessarily require a connection to a mobile network to use.<ref>{{Cite web|url=https://www.theverge.com/2017/6/17/15772142/how-to-set-up-two-factor-authentication|title=How to set up two-factor authentication on all your online accounts|last=Garun|first=Natt|date=June 17, 2017|website=The Verge|access-date=July 14, 2017}}</ref><ref name="verge-2famess">{{Cite web|url=https://www.theverge.com/2017/7/10/15946642/two-factor-authentication-online-security-mess|title=Two-factor authentication is a mess|last=Brandom|first=Russell|date=July 10, 2017|website=The Verge|access-date=July 14, 2017}}</ref><ref>{{cite web|url=http://www.polygon.com/2015/4/15/8424587/steam-mobile-app-two-factor-login-steam-guard|title=Valve adds two-factor login authentication to Steam mobile app|last=McWhertor|first=Michael|date=April 15, 2015|website=[[Polygon (website)|Polygon]]|access-date=September 8, 2015}}</ref>