Server and/or client device authentication

A method comprising:

• generating, during a computing session between a website or an application for a server and a mobile device, a token by a processor on the server;
• sending, by the processor, the generated token to the mobile device during the computing session;
• receiving, by the processor, one or more one-time-passwords from the mobile device, the one or more one-time-passwords generated by the mobile device based on the generated token during the computing session;
• and
• authenticating, by the processor, the mobile device on the website or the application hosted on the server based on the one or more one-time passwords, wherein the authenticating is performed during the computing session between the website or the application and the mobile device.

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

• generating, during a computing session between a website or an application for a server and a mobile device, a token by the server;
• sending the generated token to the mobile device during the computing session;
• receiving one or more one-time-passwords from the mobile device, the one or more one-time-passwords generated by the mobile device based on the generated token during the computing session;
• and
• authenticating the mobile device on the to a website or the application hosted on the server based on the one or more one-time passwords, wherein the authenticating is performed during the computing session between the website or the application and the mobile device.