> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/one-time-password-otp-usage-with-entries.md).

# One-time password (OTP) usage with entries

Remote Desktop Manager entries can be set up to use a one-time password (OTP) at launch.

In the ***Connection – One-time password*** section of an entry, select a credential ***Source*** and a ***Usage*** for the OTP code. Type if needed a ***combination string***.

![](https://cdnweb.devolutions.net/docs/RDMW6005_2023_2.png)

For Source configuration information, select from the list or click this link to jump to the Usage configuration information.

### Source

Credential ***Source*** is used to link entries to OTP account credential information.

#### Current session's credentials

The ***Current session's credentials*** options will use the OTP credentials setup in the entry ***Common - General - Credentials*** section. Credentials options available with OTP are [***My personal credentials***](https://docs.devolutions.net/rdm/commands/file/my-account-settings/my-personal-credentials/), ***My privileged account*** and ***Embedded*** (this mode is deprecated and not recommended).

{% hint style="warning" %}
In a team environment, we recommend using the [Linked (vault)](#linked-vault) option instead with a ***One-time password (OTP)*** credential entry.
{% endhint %}

<figure><img src="https://cdnweb.devolutions.net/docs/RDMW6006_2023_2.png" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
For the Copy OTP option to appear in the contextual (right-click) menu of an entry, an OTP must be configured and set in the ***Properties*** of the entry, in ***Connection – One-time password***.
{% endhint %}

#### Inherited

The ***Inherited*** option will climb up the navigation tree until it has access to a set of OTP credentials in a parent folder in the ***Connection - One-time password*** section.

{% hint style="info" %}
***For the Source*** inheritance to work, the ***Connection - One-time password - Source*** needs to be set to ***Inherited*** for every parent folder until it reaches the desired configuration.
{% endhint %}

<figure><img src="https://cdnweb.devolutions.net/docs/RDMW6008_2023_2.png" alt=""><figcaption></figcaption></figure>

#### Linked (vault)

Link your entry to use an existing specific ***One-time password (OTP)*** credential entry from the same vault. This is the preferred method.

{% hint style="info" %}
To use the ***Linked (vault)*** feature, users must have the ***View***&#x70;ermission on the entry.
{% endhint %}

<figure><img src="https://cdnweb.devolutions.net/docs/RDMW6009_2023_2.png" alt=""><figcaption></figcaption></figure>

#### Linked (external vault)

Link your entry to use an existing specific ***One-time password (OTP)*** credential entry from a different vault.

{% hint style="info" %}
To use the ***Linked (external vault)*** feature, users must have the ***View***&#x70;ermission on the entry.
{% endhint %}

#### None

By default, the entries OTP ***Source*** is set to ***None*** In this state the entry is not linked to any OTP credentials.

#### Prompt

The ***Prompt*** option opens a credential list of available OTP credentials every time the session launch.

### Usage

One-time password ***Usage*** is an option to affix the OTP code. Here is the list of possible actions:

* ***None***: No action is done. This is the set default setting.
* ***Append to the password***: Affix the OTP after the password.
* ***Prepend to the password***: Affix the OTP before the password.
* ***Specific to session***: If selected, the OTP will, if it applies, be used in a manner specific to the session being launched (not all sessions support OTP).

  <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>The following sessions are supported by OTP: OpenVPN, SophosVPN, FTP, SFTP, SCP, SSH Tunnel, Telnet, Portforward, and SSH Shell. Please note that the <em><strong>OTP prompt string</strong></em> setting must be configured for all sessions to run, with the exception of OpenVPN and SophosVPN.</p></div>
* ***Inherited***: Will climb up the navigation tree until it has access to a ***Usage*** setting in a parent folder in the ***Connection - One-time password*** section. For the ***Usage*** inheritance to work, the ***Connection - One-time password - Usage*** needs to be set to ***Inherited*** for every parent folder until it reaches the desired configuration.
* ***Append to the username***: Affix the OTP after the username.
* ***Prepend to the username***: Affix the OTP before the username.
* ***Append and use push notification***: Affix the OTP after the username and use push notification.

#### See also

* [Devolutions Academy - Configuring and Managing Credential Entries](https://academy.devolutions.net/student/path/1916054/activity/2667052)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/one-time-password-otp-usage-with-entries.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
