繁體中文（香港）
什麼是驗證器應用程式
了解驗證器應用程式是什麼以及它如何保護你的賬戶。包含其工作原理的詳細解釋和使用驗證器應用程式的逐步指南。
Yijun
Developer
Developer
Stop wasting weeks on user auth
Launch secure apps faster with Logto. Integrate user auth in minutes, and focus on your core product.
Get started
了解驗證器應用程式是什麼以及它如何保護你的賬戶。包含其工作原理的詳細解釋和使用驗證器應用程式的逐步指南。
驗證器應用程式是一種安全工具，使用加密算法（如 TOTP 或 HOTP）生成基於時間的驗證碼，以為你的賬戶添加額外的保護層。
密碼洩露經常發生，單靠密碼已經不再安全。因此，主要網站和應用程式現在提供雙重身份驗證（2FA）或多因素身份驗證（MFA）。驗證器應用程式是一種流行的 2FA 工具，能夠生成動態驗證碼來保護你的賬戶及密碼。
驗證器應用程式藉由與你的賬戶所屬伺服器共享唯一的秘密金鑰來運作。當你第一次設置 2FA 時，服務會生成此秘密金鑰並顯示為 QR 碼。掃描此 QR 碼後，你的驗證器應用程式和服務都將擁有相同的秘密——只有它們知道。
使用這個共享的秘密和當前時間，雙方可以通過標準化算法（通常是 TOTP - 基於時間的一次性密碼），獨立生成相同的六位數驗證碼。當你嘗試登錄時，服務會將你從驗證器應用程式中輸入的代碼與它生成的代碼進行比較——如果匹配，你就可以獲得訪問權。
%3btext-align:center%3b%7d%23mermaid-0 .edgeLabel p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 .edgeLabel rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 .labelBkg%7bbackground-color:rgba(232%2c 232%2c 232%2c 0.5)%3b%7d%23mermaid-0 .cluster rect%7bfill:%23ffffde%3bstroke:%23aaaa33%3bstroke-width:1px%3b%7d%23mermaid-0 .cluster text%7bfill:%23333%3b%7d%23mermaid-0 .cluster span%7bcolor:%23333%3b%7d%23mermaid-0 div.mermaidTooltip%7bposition:absolute%3btext-align:center%3bmax-width:200px%3bpadding:2px%3bfont-family:arial%2csans-serif%3bfont-size:12px%3bbackground:hsl(80%2c 100%25%2c 96.2745098039%25)%3bborder:1px solid %23aaaa33%3bborder-radius:2px%3bpointer-events:none%3bz-index:100%3b%7d%23mermaid-0 .flowchartTitleText%7btext-anchor:middle%3bfont-size:18px%3bfill:%23333%3b%7d%23mermaid-0 rect.text%7bfill:none%3bstroke-width:0%3b%7d%23mermaid-0 .icon-shape%2c%23mermaid-0 .image-shape%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3btext-align:center%3b%7d%23mermaid-0 .icon-shape p%2c%23mermaid-0 .image-shape p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bpadding:2px%3b%7d%23mermaid-0 .icon-shape rect%2c%23mermaid-0 .image-shape rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 :root%7b--mermaid-font-family:arial%2csans-serif%3b%7d%3c/style%3e%3cg%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-pointEnd'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 0 L 10 5 L 0 10 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='4.5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-pointStart'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 5 L 10 10 L 10 0 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='11' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-circleEnd'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='-1' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-circleStart'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='12' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-0_flowchart-v2-crossEnd'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='-1' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-0_flowchart-v2-crossStart'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cg class='root'%3e%3cg class='clusters'/%3e%3cg class='edgePaths'%3e%3cpath style='' class='edge-thickness-invisible edge-pattern-solid' id='L_Device_Space_4' d='M326.969%2c201.5L331.135%2c201.5C335.302%2c201.5%2c343.635%2c201.5%2c351.969%2c201.5C360.302%2c201.5%2c368.635%2c201.5%2c372.802%2c201.5L376.969%2c201.5'/%3e%3cpath style='' class='edge-thickness-invisible edge-pattern-solid' id='L_Space_Service_5' d='M436.969%2c201.5L441.135%2c201.5C445.302%2c201.5%2c453.635%2c201.5%2c461.969%2c201.5C470.302%2c201.5%2c478.635%2c201.5%2c482.802%2c201.5L486.969%2c201.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(478.96875%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='Service' class='cluster'%3e%3crect height='387' width='318.96875' y='8' x='8' style=''/%3e%3cg transform='translate(140.8046875%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='53.359375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eService%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_D_E_2' d='M167.484%2c99.5L167.484%2c105.75C167.484%2c112%2c167.484%2c124.5%2c167.484%2c136.333C167.484%2c148.167%2c167.484%2c159.333%2c167.484%2c164.917L167.484%2c170.5'/%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_E_F_3' d='M167.484%2c228.5L167.484%2c234.75C167.484%2c241%2c167.484%2c253.5%2c167.484%2c265.333C167.484%2c277.167%2c167.484%2c288.333%2c167.484%2c293.917L167.484%2c299.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(167.484375%2c 72.5)' id='flowchart-D-6' class='node default'%3e%3crect height='54' width='248.96875' y='-27' x='-124.484375' style='' class='basic label-container'/%3e%3cg transform='translate(-94.484375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='188.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eSecret Key %2b Current Time%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 201.5)' id='flowchart-E-7' class='node default'%3e%3crect height='54' width='173.234375' y='-27' x='-86.6171875' style='' class='basic label-container'/%3e%3cg transform='translate(-56.6171875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='113.234375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eTOTP Algorithm%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 330.5)' id='flowchart-F-8' class='node default'%3e%3crect height='54' width='160.53125' y='-27' x='-80.265625' style='' class='basic label-container'/%3e%3cg transform='translate(-50.265625%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='100.53125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eCode: 284913%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg transform='translate(0%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='Device' class='cluster'%3e%3crect height='387' width='318.96875' y='8' x='8' style=''/%3e%3cg transform='translate(143.03125%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='48.90625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eDevice%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_A_B_0' d='M167.484%2c99.5L167.484%2c105.75C167.484%2c112%2c167.484%2c124.5%2c167.484%2c136.333C167.484%2c148.167%2c167.484%2c159.333%2c167.484%2c164.917L167.484%2c170.5'/%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_B_C_1' d='M167.484%2c228.5L167.484%2c234.75C167.484%2c241%2c167.484%2c253.5%2c167.484%2c265.333C167.484%2c277.167%2c167.484%2c288.333%2c167.484%2c293.917L167.484%2c299.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(167.484375%2c 72.5)' id='flowchart-A-0' class='node default'%3e%3crect height='54' width='248.96875' y='-27' x='-124.484375' style='' class='basic label-container'/%3e%3cg transform='translate(-94.484375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='188.96875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eSecret Key %2b Current Time%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 201.5)' id='flowchart-B-1' class='node default'%3e%3crect height='54' width='173.234375' y='-27' x='-86.6171875' style='' class='basic label-container'/%3e%3cg transform='translate(-56.6171875%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='113.234375'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eTOTP Algorithm%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(167.484375%2c 330.5)' id='flowchart-C-2' class='node default'%3e%3crect height='54' width='160.53125' y='-27' x='-80.265625' style='' class='basic label-container'/%3e%3cg transform='translate(-50.265625%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='100.53125'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eCode: 284913%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg transform='translate(406.96875%2c 201.5)' id='flowchart-Space-12' class='node default'%3e%3crect height='30' width='60' y='-15' x='-30' style='opacity:0 !important' class='basic label-container'/%3e%3cg transform='translate(0%2c 0)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)
設置過程十分簡單：
驗證器應用程式提供了超強的安全性。根據 Google 的研究，它們能阻止 99.9% 的自動攻擊——比短信驗證效果高出 50%。讓我們探討一下為什麼它們如此安全：
想像一下入侵的挑戰：
代碼有效性比較：
把它當作一個不斷變化組合的保險庫：
你所知道的（密碼） + 你所擁有的（驗證器應用程式） + 基於時間的數學 = 幾乎無法破解的保護
讓我們透過一個實際例子來學習如何使用驗證器應用程式。
我們將使用 Logto 的身份驗證服務來演示該過程。
登錄或註冊 Logto 雲，並按照入門指南建立你的第一個網絡租戶。
前往 控制台 > 多因素身份驗證，開啟 驗證器應用程式 OTP 和 備用代碼 驗證因素，選擇「用戶在登錄時始終需要使用 MFA」作為二步驗證策略，然後單擊 保存更改。
仍在 Logto 控制台的登錄體驗頁面，點擊 登錄預覽 區域右上角的 "實時預覽" 按鈕。然後你將被重定向至演示應用程式的登錄頁面。
在登錄頁面，點擊 創建賬戶 按鈕，輸入你的用戶名和密碼來創建賬戶，然後你將看到一個顯示 QR 碼的屏幕。
打開你的驗證器應用程式，掃描 QR 碼。然後你將看到一個顯示六位數代碼的屏幕。
輸入六位數代碼以確認綁定，然後你將被重定向至備用代碼頁面。記得將備用代碼保存在安全的地方。
點擊 繼續 按鈕，你已成功登錄至演示應用程式。
當你成功登錄至演示應用程式後，點擊 退出實時預覽 按鈕以退出演示應用程式並返回至演示應用程式的登錄頁面。
嘗試使用你的用戶名和密碼登錄演示應用程式，你會發現需要輸入六位數代碼來登錄。
打開你的驗證器應用程式，輸入與 logto.app 相關的六位數代碼，你就成功登錄到演示應用程式！
驗證器應用程式是安全的，但你需要正確使用它們以獲得最佳保護：
當將賬戶新增到你的驗證器應用程式時：
如果你丟失了驗證器應用程式，請不要擔心。設置 2FA 時，服務會提供備用代碼——這些是一式的應急代碼，你應將其安全地保存在離線或密碼管理器中。
流行的驗證器應用程式提供備份功能：
如果以上均無效，你可以聯繫客戶支持以獲得幫助。