The terms two-factor authentication and one-time password are often used synonymously, even by industry leaders. This is actually wrong. There are differences, but also dependencies between the two terms.