otplib API Documentation / @otplib/core / MAX_SECRET_BYTES

Variable: MAX_SECRET_BYTES

const MAX_SECRET_BYTES: 64 = 64

Defined in: packages/core/src/utils.ts:47

Maximum secret length in bytes (512 bits)

The 64-byte maximum is not part of the RFCs. This is to prevent excessive memory usage in HMAC operations.