繁體中文（台灣）
什麼是驗證器應用程式
了解什麼是驗證器應用程式及其如何保護你的帳戶。包括其工作原理的詳細說明以及使用驗證器應用程式的逐步示例指南。
Yijun
Developer
Developer
了解什麼是驗證器應用程式及其如何保護你的帳戶。包括其工作原理的詳細說明以及使用驗證器應用程式的逐步示例指南。
驗證器應用程式是一種安全工具，它使用加密算法（如 TOTP 或 HOTP）生成基於時間的驗證碼，為你的帳戶添加一層額外的保護。
密碼洩漏頻頻發生，單靠密碼已經不再安全。因此，主要的網站和應用程式現在提供雙重身份驗證 (2FA) 或多重身份驗證 (MFA)。驗證器應用程式是一種流行的 2FA 工具，它生成動態驗證碼，與你的密碼一起保護你的帳戶。
驗證器應用程式通過與你的帳戶所在的伺服器共享唯一的秘密密鑰來工作。當你首次設置 2FA 時，服務會生成這個秘密密鑰並以 QR 碼的形式顯示。當你用驗證器應用程式掃描這個 QR 碼後，你的應用程式和服務現在都擁有相同的秘密密鑰，並且只有它們知道。
利用這個共享的秘密密鑰以及當前時間，雙方可以獨立地通過標準算法（通常是 TOTP - 基於時間的一次性密碼）生成相同的 6 位數驗證碼。當你嘗試登入時，服務會比較你從驗證器應用程式輸入的驗證碼和它生成的驗證碼 - 如果匹配，你就會被授予訪問權限。
%3btext-align:center%3b%7d%23mermaid-0 .edgeLabel p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 .edgeLabel rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 .labelBkg%7bbackground-color:rgba(232%2c 232%2c 232%2c 0.5)%3b%7d%23mermaid-0 .cluster rect%7bfill:%23ffffde%3bstroke:%23aaaa33%3bstroke-width:1px%3b%7d%23mermaid-0 .cluster text%7bfill:%23333%3b%7d%23mermaid-0 .cluster span%7bcolor:%23333%3b%7d%23mermaid-0 div.mermaidTooltip%7bposition:absolute%3btext-align:center%3bmax-width:200px%3bpadding:2px%3bfont-family:arial%2csans-serif%3bfont-size:12px%3bbackground:hsl(80%2c 100%25%2c 96.2745098039%25)%3bborder:1px solid %23aaaa33%3bborder-radius:2px%3bpointer-events:none%3bz-index:100%3b%7d%23mermaid-0 .flowchartTitleText%7btext-anchor:middle%3bfont-size:18px%3bfill:%23333%3b%7d%23mermaid-0 rect.text%7bfill:none%3bstroke-width:0%3b%7d%23mermaid-0 .icon-shape%2c%23mermaid-0 .image-shape%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3btext-align:center%3b%7d%23mermaid-0 .icon-shape p%2c%23mermaid-0 .image-shape p%7bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bpadding:2px%3b%7d%23mermaid-0 .icon-shape rect%2c%23mermaid-0 .image-shape rect%7bopacity:0.5%3bbackground-color:rgba(232%2c232%2c232%2c 0.8)%3bfill:rgba(232%2c232%2c232%2c 0.8)%3b%7d%23mermaid-0 :root%7b--mermaid-font-family:arial%2csans-serif%3b%7d%3c/style%3e%3cg%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-pointEnd'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 0 L 10 5 L 0 10 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='8' markerWidth='8' markerUnits='userSpaceOnUse' refY='5' refX='4.5' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-pointStart'%3e%3cpath style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 0 5 L 10 10 L 10 0 z'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='11' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-circleEnd'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5' refX='-1' viewBox='0 0 10 10' class='marker flowchart-v2' id='mermaid-0_flowchart-v2-circleStart'%3e%3ccircle style='stroke-width: 1%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' r='5' cy='5' cx='5'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='12' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-0_flowchart-v2-crossEnd'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cmarker orient='auto' markerHeight='11' markerWidth='11' markerUnits='userSpaceOnUse' refY='5.2' refX='-1' viewBox='0 0 11 11' class='marker cross flowchart-v2' id='mermaid-0_flowchart-v2-crossStart'%3e%3cpath style='stroke-width: 2%3b stroke-dasharray: 1%2c 0%3b' class='arrowMarkerPath' d='M 1%2c1 l 9%2c9 M 10%2c1 l -9%2c9'/%3e%3c/marker%3e%3cg class='root'%3e%3cg class='clusters'/%3e%3cg class='edgePaths'%3e%3cpath style='' class='edge-thickness-invisible edge-pattern-solid' id='L_s1_Space_4' d='M284.25%2c201.5L288.417%2c201.5C292.583%2c201.5%2c300.917%2c201.5%2c309.25%2c201.5C317.583%2c201.5%2c325.917%2c201.5%2c330.083%2c201.5L334.25%2c201.5'/%3e%3cpath style='' class='edge-thickness-invisible edge-pattern-solid' id='L_Space_s2_5' d='M394.25%2c201.5L398.417%2c201.5C402.583%2c201.5%2c410.917%2c201.5%2c419.25%2c201.5C427.583%2c201.5%2c435.917%2c201.5%2c440.083%2c201.5L444.25%2c201.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(436.25%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='s2' class='cluster'%3e%3crect height='387' width='276.25' y='8' x='8' style=''/%3e%3cg transform='translate(130.1171875%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='32.015625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3e%e6%9c%8d%e5%8b%99%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_D_E_2' d='M146.125%2c99.5L146.125%2c105.75C146.125%2c112%2c146.125%2c124.5%2c146.125%2c136.333C146.125%2c148.167%2c146.125%2c159.333%2c146.125%2c164.917L146.125%2c170.5'/%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_E_F_3' d='M146.125%2c228.5L146.125%2c234.75C146.125%2c241%2c146.125%2c253.5%2c146.125%2c265.333C146.125%2c277.167%2c146.125%2c288.333%2c146.125%2c293.917L146.125%2c299.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(146.125%2c 72.5)' id='flowchart-D-6' class='node default'%3e%3crect height='54' width='206.25' y='-27' x='-103.125' style='' class='basic label-container'/%3e%3cg transform='translate(-73.125%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='146.25'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3e%e7%a7%98%e5%af%86%e5%af%86%e9%91%b0 %2b %e7%95%b6%e5%89%8d%e6%99%82%e9%96%93%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(146.125%2c 201.5)' id='flowchart-E-7' class='node default'%3e%3crect height='54' width='138.546875' y='-27' x='-69.2734375' style='' class='basic label-container'/%3e%3cg transform='translate(-39.2734375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='78.546875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eTOTP %e7%ae%97%e6%b3%95%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(146.125%2c 330.5)' id='flowchart-F-8' class='node default'%3e%3crect height='54' width='170.296875' y='-27' x='-85.1484375' style='' class='basic label-container'/%3e%3cg transform='translate(-55.1484375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='110.296875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3e%e9%a9%97%e8%ad%89%e7%a2%bc: 284913%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg transform='translate(0%2c 0)' class='root'%3e%3cg class='clusters'%3e%3cg data-look='classic' id='s1' class='cluster'%3e%3crect height='387' width='276.25' y='8' x='8' style=''/%3e%3cg transform='translate(130.1171875%2c 8)' class='cluster-label'%3e%3cforeignObject height='24' width='32.015625'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3e%e8%a3%9d%e7%bd%ae%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='edgePaths'%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_A_B_0' d='M146.125%2c99.5L146.125%2c105.75C146.125%2c112%2c146.125%2c124.5%2c146.125%2c136.333C146.125%2c148.167%2c146.125%2c159.333%2c146.125%2c164.917L146.125%2c170.5'/%3e%3cpath marker-end='url(%23mermaid-0_flowchart-v2-pointEnd)' style='' class='edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link' id='L_B_C_1' d='M146.125%2c228.5L146.125%2c234.75C146.125%2c241%2c146.125%2c253.5%2c146.125%2c265.333C146.125%2c277.167%2c146.125%2c288.333%2c146.125%2c293.917L146.125%2c299.5'/%3e%3c/g%3e%3cg class='edgeLabels'%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg class='edgeLabel'%3e%3cg transform='translate(0%2c 0)' class='label'%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' class='labelBkg' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='edgeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg class='nodes'%3e%3cg transform='translate(146.125%2c 72.5)' id='flowchart-A-0' class='node default'%3e%3crect height='54' width='206.25' y='-27' x='-103.125' style='' class='basic label-container'/%3e%3cg transform='translate(-73.125%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='146.25'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3e%e7%a7%98%e5%af%86%e5%af%86%e9%91%b0 %2b %e7%95%b6%e5%89%8d%e6%99%82%e9%96%93%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(146.125%2c 201.5)' id='flowchart-B-1' class='node default'%3e%3crect height='54' width='138.546875' y='-27' x='-69.2734375' style='' class='basic label-container'/%3e%3cg transform='translate(-39.2734375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='78.546875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3eTOTP %e7%ae%97%e6%b3%95%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3cg transform='translate(146.125%2c 330.5)' id='flowchart-C-2' class='node default'%3e%3crect height='54' width='170.296875' y='-27' x='-85.1484375' style='' class='basic label-container'/%3e%3cg transform='translate(-55.1484375%2c -12)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='24' width='110.296875'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3cp%3e%e9%a9%97%e8%ad%89%e7%a2%bc: 284913%3c/p%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3cg transform='translate(364.25%2c 201.5)' id='flowchart-Space-12' class='node default'%3e%3crect height='30' width='60' y='-15' x='-30' style='opacity:0 !important' class='basic label-container'/%3e%3cg transform='translate(0%2c 0)' style='' class='label'%3e%3crect/%3e%3cforeignObject height='0' width='0'%3e%3cdiv style='display: table-cell%3b white-space: nowrap%3b line-height: 1.5%3b max-width: 200px%3b text-align: center%3b' xmlns='http://www.w3.org/1999/xhtml'%3e%3cspan class='nodeLabel'%3e%3c/span%3e%3c/div%3e%3c/foreignObject%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)
設置過程簡單明瞭：
驗證器應用程式提供了令人印象深刻的安全性。根據 Google 的研究，它們可以阻擋 99.9% 的自動攻擊，這比 SMS 驗證高 50%。讓我們來看看為什麼它們如此安全：
想像一下破解的難度：
驗證碼有效性比較：
把它想成是一個不斷變化組合的保險庫：
你知道的 (密碼) + 你擁有的 (驗證器應用程式) + 基於時間的計算 = 幾乎無法破解的保護
讓我們通過一個實例來學習如何使用驗證器應用程式。
我們將使用 Logto 的認證服務來展示這個過程。
登入或註冊到 Logto Cloud，並根據入門指南創建你的第一個租戶。
前往 控制台 > 多因素身份驗證，並打開 驗證器應用程式 OTP 和 備份代碼 認證因素，並選擇 "要求用戶在登入時總是使用 MFA" 作為 2 步驟驗證政策，然後點擊 保存更改。
仍在 Logto 控制台的登入體驗頁面，點擊 Sign-in Preview 部分右上方的 "Live preview" 按鈕。然後你將被重定向到 Demo App 的登入頁面。
點擊登入頁面的 create an account 按鈕，輸入用戶名和密碼以創建帳戶，然後你將看到顯示 QR 碼的畫面。
打開你的驗證器應用程式，並掃描 QR 碼。然後你將看到顯示一個 6 位數代碼的畫面。
輸入 6 位數代碼以確認綁定，然後你將被重定向到備份代碼頁面。記得將備份代碼保存在安全的地方。
點擊 繼續 按鈕，你已成功登入 Demo App。
當你已成功登入 Demo App 時，點擊 Sign out the live preview 按鈕以退出 Demo App 並返回 Demo App 的登入頁面。
嘗試使用用戶名和密碼登入 Demo App，你會發現需要輸入一個 6 位數代碼才能登入。
打開你的驗證器應用程式，輸入顯示的相關於 logto.app 的 6 位數代碼，你已成功登入 Demo App！
驗證器應用程式是安全的，但你需要正確使用它們以獲得最佳保護：
將帳戶添加到驗證器應用程式時：
如果你丟失了驗證器應用程式，請不要擔心。在設置 2FA 時，服務會提供備份代碼——這些是一種應急的一次性代碼，你應該將它們安全地存儲在離線或密碼管理器中。
熱門驗證器應用程式提供備份功能：
如果所有辦法都失敗，你可以聯絡客服尋求幫助。