---
title: "Authenticator application types"
slug: "oas-pg-authenticator-application-types-3-28"
updated: 2025-07-04T10:04:29Z
published: 2025-07-07T13:58:52Z
canonical: "docs.onespan.com/oas-pg-authenticator-application-types-3-28"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authenticator application types

Each authenticator is programmed with at least one authenticator application and a unique secret. The authenticator application uses this unique secret when it generates one-time password (OTP) values or an electronic signature.

Each type of authenticator application generates OTP values or signatures from different data, and in slightly different ways:

Response-Only

Creates an OTP, either based on the current date and time or on the number of uses (i.e. events).

Challenge/Response

Creates an OTP (also referred to as a response) based on a numerical challenge given on a logon page. This challenge may be either one of the following:

- Custom-created challenge for the specific authenticator
- Randomly-created challenge

The OTP may also be based on the date and time.

Signature

Electronic signature applications are typically used in online banking. The authenticator creates a unique code—i.e. an electronic signature—based on a number of transaction data fields entered plus (optionally) the date and time or events.

multi-mode

A multi-mode authenticator can be used on all of the above modes.