Whether the enrolment has been confirmed with a valid code.
ReadonlylabelThe label shown in the authenticator app, belonging to secret.
The last claimed TOTP step; a step must be greater than this to be accepted. Monotonic across re-enrolment: a step claimed under the old secret stays claimed after the new one is confirmed.
OptionalpendingThe label belonging to pendingSecret.
OptionalpendingThe base32 secret of a re-enrolment awaiting confirmation, if one is in
progress. Only ITotpStore and the confirmation path read it;
verification of a confirmed factor uses secret alone.
ReadonlysecretThe base32 secret (RFC 4648, no padding) that verifies today. While a re-enrolment awaits confirmation this stays the OLD confirmed secret, so beginning a new enrolment never removes the working factor.
A TOTP enrolment record.