

If the computer that you are logging into isn't hardened against brute-force Answering no means allowing fewer valid codes within a time window, which is the more secure option. You should only change this option if you have problems with time synchronization. Answering no to this question restricts you to 3 valid codes in a 1:30 minute window.This will permit for a time skew of up to 4 minutes If youĮxperience problems with poor time synchronization, you can increase the windowįrom its default size of 3 permitted codes (one previous code, the currentĬode, the next code) to 17 permitted codes (the 8 previous codes, the currentĬode, and the 8 next codes). Time skew of up to 30 seconds between authentication server and client.

We allow an extra token before and after the current time. In order to compensate for possible time-skew between the client and the server,

