It stands for Time-based One Time Password. it’s what you use when you use an Authenticator app that generates a code good for 30 seconds, then make a new one, etc. it works offline, no sending needed beyond one time setup