简体中文
认证器应用程序是什么
了解认证器应用程序是什么以及它如何保护你的账户。包括其工作原理的详细解释和使用认证器应用程序的分步指南。
Yijun
Developer
Developer
了解认证器应用程序是什么以及它如何保护你的账户。包括其工作原理的详细解释和使用认证器应用程序的分步指南。
认证器应用程序是一种安全工具，通过使用加密算法（如 TOTP 或 HOTP）生成基于时间的验证码，为你的账户增加一层额外的保护。
密码泄露经常发生，仅依靠密码已不再安全。这就是为什么主要网站和应用程序现在提供双重身份验证 (2FA) 或多因素身份验证 (MFA) 的原因。认证器应用程序是流行的 2FA 工具，它生成动态验证码来保护你的账户以及你的密码。
认证器应用程序通过与托管你的账户的服务器分享一个独特的密钥来工作。当你首次设置 2FA 时，服务会生成这个密钥并以二维码的形式展示出来。一旦你用认证器应用程序扫描这个代码，你的应用程序和服务现在都持有相同的密钥——只有他们知道它。
使用这个共享密钥以及当前时间，双方都可以通过标准化算法（通常是 TOTP - 基于时间的一次性密码）独立生成相同的六位验证码。当你尝试登录时，服务会将你从认证器应用程序输入的代码与它生成的代码进行比较——如果匹配，你就被授予访问权限。
%3btext-align:center%3b%7d%23mermaid-0 .edgeLabel p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 .edgeLabel rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 .labelBkg%7bbackground-color:rgba(232%2c 232%2c 232%2c 0.5)%3b%7d%23mermaid-0 .cluster rect%7bfill:%23ffffde%3bstroke:%23aaaa33%3bstroke-width:1px%3b%7d%23mermaid-0 .cluster text%7bfill:%23333%3b%7d%23mermaid-0 .cluster span%7bcolor:%23333%3b%7d%23mermaid-0 div.mermaidTooltip%7bposition:absolute%3btext-align:center%3bmax-width:200px%3bpadding:2px%3bfont-family:arial%2csans-serif%3bfont-size:12px%3bbackground:hsl(80%2c 100%25%2c 96.2745098039%25)%3bborder:1px solid %23aaaa33%3bborder-radius:2px%3bpointer-events:none%3bz-index:100%3b%7d%23mermaid-0 .flowchartTitleText%7btext-anchor:middle%3bfont-size:18px%3bfill:%23333%3b%7d%23mermaid-0 rect.text%7bfill:none%3bstroke-width:0%3b%7d%23mermaid-0 .icon-shape%2c%23mermaid-0 .image-shape%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3btext-align:center%3b%7d%23mermaid-0 .icon-shape p%2c%23mermaid-0 .image-shape p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bpadding:2px%3b%7d%23mermaid-0 .icon-shape rect%2c%23mermaid-0 .image-shape rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 :root%7b--mermaid-font-family:arial%2csans-serif%3b%7d%3c/style%3e%3cg%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-pointEnd'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 0 L 10 5 L 0 10 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='4.5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-pointStart'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 5 L 10 10 L 10 0 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='11' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-circleEnd'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='-1' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-circleStart'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='12' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-0_flowchart-v2-crossEnd'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='-1' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-0_flowchart-v2-crossStart'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cg class='root'%3e%3cg class='clusters'/%3e%3cg class='edgePaths'%3e%3cpath style='' class='edge-thickness-invisible edge-pattern-solid' id='L_Device_Space_4' d='M326.969%2c201.5L331.135%2c201.5C335.302%2c201.5%2c343.635%2c201.5%2c351.969%2c201.5C360.302%2c201.5%2c368.635%2c201.5%2c372.802%2c201.5L376.969%2c201.5'/%3e%3cpath style='' class='edge-thickness-invisible edge-pattern-solid' id='L_Space_Service_5' d='M436.969%2c201.5L441.135%2c201.5C445.302%2c201.5%2c453.635%2c201.5%2c461.969%2c201.5C470.302%2c201.5%2c478.635%2c201.5%2c482.802%2c201.5L486.969%2c201.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(478.96875%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='Service' class='cluster'%3e%3crect height='387' width='318.96875' y='8' x='8' style=''/%3e%3cg transform='translate(140.8046875%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='53.359375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eService%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_D_E_2' d='M167.484%2c99.5L167.484%2c105.75C167.484%2c112%2c167.484%2c124.5%2c167.484%2c136.333C167.484%2c148.167%2c167.484%2c159.333%2c167.484%2c164.917L167.484%2c170.5'/%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_E_F_3' d='M167.484%2c228.5L167.484%2c234.75C167.484%2c241%2c167.484%2c253.5%2c167.484%2c265.333C167.484%2c277.167%2c167.484%2c288.333%2c167.484%2c293.917L167.484%2c299.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(167.484375%2c 72.5)' id='flowchart-D-6' class='node default'%3e%3crect height='54' width='248.96875' y='-27' x='-124.484375' style='' class='basic label-container'/%3e%3cg transform='translate(-94.484375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='188.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eSecret Key %2b Current Time%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 201.5)' id='flowchart-E-7' class='node default'%3e%3crect height='54' width='173.234375' y='-27' x='-86.6171875' style='' class='basic label-container'/%3e%3cg transform='translate(-56.6171875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='113.234375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eTOTP Algorithm%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 330.5)' id='flowchart-F-8' class='node default'%3e%3crect height='54' width='160.53125' y='-27' x='-80.265625' style='' class='basic label-container'/%3e%3cg transform='translate(-50.265625%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='100.53125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eCode: 284913%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg transform='translate(0%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='Device' class='cluster'%3e%3crect height='387' width='318.96875' y='8' x='8' style=''/%3e%3cg transform='translate(143.03125%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='48.90625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eDevice%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_A_B_0' d='M167.484%2c99.5L167.484%2c105.75C167.484%2c112%2c167.484%2c124.5%2c167.484%2c136.333C167.484%2c148.167%2c167.484%2c159.333%2c167.484%2c164.917L167.484%2c170.5'/%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_B_C_1' d='M167.484%2c228.5L167.484%2c234.75C167.484%2c241%2c167.484%2c253.5%2c167.484%2c265.333C167.484%2c277.167%2c167.484%2c288.333%2c167.484%2c293.917L167.484%2c299.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(167.484375%2c 72.5)' id='flowchart-A-0' class='node default'%3e%3crect height='54' width='248.96875' y='-27' x='-124.484375' style='' class='basic label-container'/%3e%3cg transform='translate(-94.484375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='188.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eSecret Key %2b Current Time%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 201.5)' id='flowchart-B-1' class='node default'%3e%3crect height='54' width='173.234375' y='-27' x='-86.6171875' style='' class='basic label-container'/%3e%3cg transform='translate(-56.6171875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='113.234375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eTOTP Algorithm%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 330.5)' id='flowchart-C-2' class='node default'%3e%3crect height='54' width='160.53125' y='-27' x='-80.265625' style='' class='basic label-container'/%3e%3cg transform='translate(-50.265625%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='100.53125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eCode: 284913%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg transform='translate(406.96875%2c 201.5)' id='flowchart-Space-12' class='node default'%3e%3crect height='30' width='60' y='-15' x='-30' style='opacity:0 !important' class='basic label-container'/%3e%3cg transform='translate(0%2c 0)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)
设置过程很简单：
认证器应用程序提供了令人印象深刻的安全性。根据谷歌的研究，它们阻止了 99.9% 的自动攻击——这比短信验证还要有效 50%。让我们来探讨一下它们为什么如此安全：
想象一下破解的挑战：
代码有效性比较：
可以把它看作一个拥有不断变化组合的保险库：
你知道的（密码） + 你拥有的（认证器应用程序） + 基于时间的数学 = 几乎无法破解的保护
让我们通过一个实际示例来学习如何使用认证器应用程序。
我们将展示使用 Logto 的身份验证服务的过程。
登录或注册 Logto Cloud，并根据入职指南创建你的第一个租户。
前往 控制台 > 多因素身份验证，打开认证器应用程序 OTP和备份代码身份验证因素，并选择"用户在登录时总是需要使用 MFA"作为两步验证策略，然后点击保存更改。
仍在 Logto 控制台的登录体验页面，点击 "Sign-in Preview" （登录预览）部分右上方的 "Live preview" 按钮。然后你将被重定向到演示应用的登录页面。
点击登录页面上的创建账户按钮，输入你的用户名和密码来创建账户，然后你将看到显示二维码的屏幕。
打开你的认证器应用程序，扫描二维码。然后你将看到显示六位代码的屏幕。
输入六位代码以确认绑定，然后你将被重定向到备份代码页面。记得在安全的地方保存备份代码。
点击继续按钮，你已经成功登录到演示应用。
当你成功登录演示应用后，点击登出实时预览按钮以登出演示应用并返回到演示应用的登录页面。
尝试用你的用户名和密码登录演示应用，你会发现你需要输入六位代码来登录。
打开你的认证器应用程序，输入与 logto.app 相关的显示六位代码，你已经成功登录到演示应用！
认证器应用程序很安全，但需要正确使用才能获得最佳保护：
将账户添加到你的认证器应用程序时：
如果你丢失了认证器应用程序，不要担心。在设置 2FA 时，服务会提供备份代码——这些是一次性紧急代码，你应该安全地离线或在密码管理器中存储。
流行的认证器应用程序提供备份功能：
如果一切都失败，你可以联系客户支持寻求帮助。