Validate TOTP token (without creating a credential)
This workflow provides a secure way to verify two-factor authentication codes by comparing user input against a stored TOTP secret. Using a custom function node, it validates six-digit tokens without requiring external credentials or complex integrations. It is an ideal lightweight solution for developers building custom authentication flows or security checkpoints within their automation.
Run this with your team's AIWhat This Recipe Does
Security is a top priority for any modern business operation, and this TOTP validation automation provides a robust layer of protection for your digital assets. By implementing Time-based One-Time Password verification, you can ensure that only authorized users gain access to sensitive workflows or data. This specific automation is designed for high-security environments because it validates codes without the need to store permanent credentials within the automation platform. This reduces your attack surface and simplifies compliance with data protection regulations. Whether you are building an internal tool for financial approvals or a secure portal for sensitive customer information, this workflow acts as a reliable gatekeeper. It allows your business to leverage standard authenticator apps like Google Authenticator or Authy to verify identity in real-time. By integrating this validation step into your custom Runwork applications, you move beyond simple passwords and adopt a professional-grade security posture that protects your company from unauthorized access and potential data breaches.
What your team gets
Forms and dashboards, so it is not a script only one person understands
Runs on your schedule in the cloud, so it does not stop when a laptop closes
Endpoints, so the rest of your stack can trigger the same work
ManualTrigger, Code, If, StickyNote, Set connected for the team, not per person
How It Works
- 1
Open the recipe and connect your accounts
Connect ManualTrigger and Code once, in your team cloud, and nobody has to do it again on their own machine
- 2
Tell your own agent what is different about your process
Claude, ChatGPT, Cursor, whichever your team already uses. It adapts the recipe to how you actually work
- 3
Run it, then leave it running
It lives in your team cloud, so it keeps going after you close the laptop and every teammate's AI can use it
Who Uses This
- Operations managers can require a 2FA code before any high-value financial transaction is processed through an internal dashboard.
- IT administrators can secure access to sensitive database management tools by requiring identity verification at the start of every session.
- Customer support leads can protect private user data by adding a verification step before agents are allowed to export sensitive account information.
Frequently Asked Questions
Does this require storing my users' secret keys in the app?
No, this workflow is designed to handle secrets dynamically, allowing you to perform secure validation without maintaining a permanent database of credentials within the automation environment.
Can my team use their existing authenticator apps?
Yes, this automation is fully compatible with standard TOTP applications such as Google Authenticator, Authy, and Microsoft Authenticator.
What happens if a user enters an expired or incorrect code?
The workflow includes built-in logic to detect invalid entries, allowing the system to immediately block the request and prevent the subsequent steps from executing.
Can I add this to an existing business process?
Yes, this validation logic is modular and can be placed at the beginning of any workflow to serve as a secure entry point for your business operations.
Coming from n8n?
This recipe uses nodes like ManualTrigger, Code, If, StickyNote and 1 more. On Runwork, you don't need to learn n8n's workflow syntax. Describe what you want to your own AI agent in plain English.
Based on n8n community workflow. View original
Related Recipes
Monitor SSL certificate expiry dates with Google Sheets & Slack alerts
Maintaining secure websites is critical for customer trust and search engine rankings, yet many businesses rely on manual checks or memory to renew SSL certificates. This automation eliminates the risk of expired certificates by transforming a simple Google Sheet into a proactive monitoring system. The workflow automatically scans your list of domains on a set schedule, calculates the days remaining until expiry, and triggers instant alerts via Slack when action is needed. By centralizing your domain management, you avoid the chaos of managing multiple vendor portals and prevent costly downtime or security warnings that drive visitors away. This tool ensures your IT or security team has ample lead time to handle renewals, moving your infrastructure management from reactive firefighting to organized, automated oversight.
Analyze emails with S1EM
This automation streamlines your security operations by transforming a standard email inbox into a proactive incident response hub. By monitoring incoming messages via IMAP, the system automatically identifies potential threats and converts them into structured cases within TheHive. Instead of requiring security analysts to manually monitor mailboxes for phishing reports or system alerts, this workflow handles the entire intake process. It utilizes Cortex to perform deep analysis on suspicious indicators, such as URLs and file attachments, ensuring that your team has enriched, actionable data the moment they begin an investigation. The workflow includes intelligent logic and waiting periods to ensure all automated background checks are completed before finalizing the report. This approach significantly reduces the mean time to respond (MTTR) to security incidents by eliminating manual data entry and initial triage. By offloading these repetitive tasks to an automated system, your security personnel can focus on high-value remediation and strategic defense rather than administrative overhead. The result is a faster, more accurate security posture that ensures critical alerts are never missed in a crowded inbox.
Generate domain insights with WHOIS lookup and GPT-5-Nano via RapidAPI
This automation serves as a powerful bridge between your front-end applications and external security or identity verification services. By utilizing a webhook-based architecture, it allows your business to securely process incoming data requests, perform complex HTTP lookups, and return immediate, structured responses. This is particularly valuable for organizations that need to validate user credentials, check identity status, or interface with third-party security APIs without building a custom backend from scratch. Instead of manual verification processes or fragmented data handling, this workflow centralizes the logic, ensuring that every request is handled consistently and securely. The result is a more responsive user experience, reduced manual overhead for security teams, and a scalable way to manage identity-related data across multiple platforms. By automating the communication between your app and external data sources, you ensure that critical security information is always accurate and delivered in real-time to the systems that need it most.
Protect Telegram groups with math CAPTCHA verification and Google Sheets
The Security and Identity Management automation provides a robust framework for handling sensitive user interactions and data verification directly through Telegram. By integrating messaging capabilities with Google Sheets and custom logic, this workflow transforms a standard chat interface into a secure portal for identity management. It eliminates the need for complex internal portals by allowing administrators or automated systems to process requests, verify information against existing databases, and update records in real-time. The automation ensures that every interaction is logged and validated, reducing the risk of unauthorized access or data entry errors. For businesses handling high volumes of user requests or requiring rapid identity verification, this solution provides a scalable way to maintain security protocols without sacrificing speed. It bridges the gap between communication platforms and core data management, ensuring that your identity workflows are both accessible and highly secure.
Run this with the AI your team already uses
Your agent adapts it, your team cloud keeps it running, and everyone's AI can find it.
Open this recipe in Runwork