Complete guide to setting up and generating TOTP codes in n8n 🔐

TOTP (Time-based One-Time Password) is a secure authentication method that generates temporary codes valid for 30-60 seconds. It works by combining a shared secret key with the current timestamp to create a unique code. Businesses use TOTP for secure logins without SMS vulnerabilities.

The algorithm ensures codes expire quickly, preventing replay attacks while maintaining usability. For example, when logging into a cloud service, the TOTP code from your authenticator app changes every 30 seconds, making stolen codes useless after expiration.

• More secure than SMS-based 2FA
• Works offline once initially configured
• Standardized algorithm (RFC 6238)

Automating TOTP codes in n8n eliminates manual code entry errors and saves significant time for teams managing multiple accounts. It enables secure automation workflows that require 2FA without human intervention.

This is particularly valuable for IT teams managing system integrations where manual 2FA entry would create bottlenecks in automated processes. For instance, automated backup systems can now run securely overnight without requiring staff to be available to input codes.

• Enables truly hands-off automation
• Reduces operational delays
• Scales to hundreds of accounts

Automated TOTP generation maintains security while improving efficiency. The secret keys remain encrypted in n8n's credential system, just as secure as manual authenticator apps. Automated workflows actually reduce phishing risks by eliminating human error in code entry.

Proper implementation includes credential rotation and access controls to maintain security standards. For example, you can set up separate credentials for development and production environments with different access levels, something impossible with personal authenticator apps.

• Encrypted credential storage
• No human error in code transmission
• Granular access controls possible

Common use cases include automated system logins for scheduled reports, CI/CD pipeline authentication, automated backup systems requiring 2FA, and bulk account management. Marketing teams use it for social media platform automation, while IT teams automate infrastructure monitoring tools that require secure access.

The workflow enables secure automation where manual 2FA would be impractical. For example, a company running nightly database exports to cloud storage can now fully automate the process even with 2FA enabled on their cloud account.

• Scheduled system maintenance
• Automated data pipelines
• Multi-account management

Yes, the workflow can manage multiple TOTP secrets simultaneously. You can store credentials for different services in n8n's secure credential system and reference them as needed. The template includes logic to handle multiple authentication scenarios.

This makes it scalable for organizations with diverse 2FA requirements across their tech stack. A practical example would be managing TOTP codes for your CRM, marketing automation platform, and internal systems all through one centralized workflow.

• Manage unlimited services
• Organize by department or function
• Easy credential rotation

Best practice recommends rotating TOTP secrets every 90 days for automated systems, similar to password rotation policies. More frequent rotations may be needed for high-security systems. The workflow includes error handling for expired codes, making rotation manageable.

Implement credential rotation as part of your standard security maintenance schedule. For instance, financial institutions might rotate secrets monthly, while other businesses may find quarterly rotation sufficient based on their risk assessment.

• Balance security and operational needs
• Align with existing credential policies
• Document rotation schedules

Absolutely. GrowwStacks specializes in building custom authentication workflows tailored to your security requirements. Our team can design a solution that integrates TOTP generation with your existing systems while maintaining security best practices.

We implement proper credential management, audit logging, and access controls for enterprise-grade automation. Whether you need to automate logins for a specific SaaS platform or build a comprehensive authentication system, we can develop a solution that fits your technical environment and security policies.

• Enterprise-grade security design
• Integration with existing systems
• Ongoing support and maintenance