What we know
Two-factor authentication mechanism combining decoy codes with Google Authenticator.
Evidence limits
Evaluation is a prototype and attack analysis; user study and deployment at scale are missing.
Reviewed: Full text.
Full-text review · 2026-09-16
Design and scope
Authentication prototype combining real and decoy codes with a TOTP-based second factor.
Main finding
Aims to detect use of stolen secrets while retaining compatibility with common authenticators.
Evidence limits
Evaluation is a prototype and attack analysis; user study and deployment at scale are missing.
Sources and provenance
- Cybersecurity Revisited: Honeytokens Meet Google Authenticator
Full text · 2026-09-16
Reviewed: 2026-09-16. This record may change when new evidence is found.