Introduction of Authenticator App (TOTP)
      Back to home
      1. Help Page
      2. Account Management
      3. Introduction of Authenticator App (TOTP)

      Overview of the Authenticator App (TOTP)

      What is the Authenticator App (TOTP)? 

      The Authenticator App is a time-based one-time password (TOTP) method that generates a secure 6-digit code which refreshes every 30 seconds. It promises a stronger security compared  to WhatsApp, SMS or email-based OTPs.

       

      What security actions can be used by the Authenticator? 

      When enabled, TOTP can be used to verify your identify for: 

      • Login Authentication 
      • Transaction Authentication 
      • Adding Beneficiaries 

      Why is the Authenticator App being introduced? 

      • Increase account security 
      • Reduce OTP delivery failures via SMS/WhatsApp 
      • Align with industry security standards for financial services 

       

      Which authenticator apps are supported? 

      All standard TOTP based apps are supported, including: 

      • Google Authenticator 
      • Microsoft Authenticator 
      • Authy 
      • Other TOTP-compatible apps 

       

      Note: The Authenticator App will go live in Malaysia on 18 December and will be subsequently rolled out progressively to other countries in phases.