SEC-004Two-factor authentication in plain PHP, no libraryTOTP is HMAC-SHA1 over a time counter, truncated to six digits. About forty lines, and it works with every authenticator app.PHPTested on PHP 8.2, MariaDB 10.6