Java TOTP/HOTP library for two-factor authentication (2FA). RFC 6238 compliant with constant-time verification, replay attack prevention, QR code generation, and zero required dependencies. Drop-in 2FA for Spring Boot and Java applications.