Implements two-step verification of HOTP/TOTP.