Generate passcodes on Android
Your SafeNet MobilePASS+ authenticators can be configured by your system administrator to generate passcodes using one of the following methods:
-
Time-based: When you unlock a time-based authenticator, the OTP displays and a countdown icon
shows a countdown until next refresh. As long as the authenticator is unlocked, the OTP refreshes automatically. -
Event-based: When you unlock an event-based authenticator, either a greyed-out icon
(meaning the OTP cannot be refreshed) or a refresh icon 
(that must be tapped to refresh the OTP) displays. -
Challenge-Response: When you unlock a challenge-response authenticator, you are prompted to enter a challenge code before the OTP displays. When the authenticator is unlocked, select the refresh icon
and enter a challenge to generate another OTP.
Your SafeNet MobilePASS+ app can contain multiple SafeNet MobilePASS+ authenticators, configured with different passcode generation methods.
Note
The number of pending login requests is displayed at the bottom of the app screen.
Note
Sending the app to the background or exiting the app will lock all of the authenticators.
Generate a passcode with time-based authenticators
If you are using a time-based authenticator, the passcode is generated automatically after the specified time interval has elapsed. When a passcode is generated, the previous passcode is no longer valid.
-
Open the SafeNet MobilePASS+ app.
-
If there is more than one authenticator, select the required authenticator.
-
If your authenticator is PIN-protected, enter the PIN, or if available, use the biometric PIN.
The passcode displays.
-
Select the passcode to copy it to the clipboard.
Note
As a security best practice Thales Group recommends that users do not use the copy and paste function for the OTP or enrollment strings because the clipboard is shared among all applications running on a device. Users should also refrain from using custom or third party keyboard applications as those can be used to capture sensitive user data like passcodes and PINs.
A new passcode displays at the end of the specified time-interval.
Generate a passcode with event-based authenticators
Event-based authenticators are so-called because they require an event to generate the passcode. In SafeNet MobilePASS+, the event is the tapping of the refresh icon. The passcode is valid until it is used to authenticate or until another passcode is generated.
-
Open the SafeNet MobilePASS+ app.
-
If there is more than one authenticator, select the required authenticator.
-
If your authenticator is PIN-protected, enter the PIN, or if available, the biometric PIN.
The passcode displays.
-
Select the passcode to copy it to the clipboard.
Note
As a security best practice Thales Group recommends that users do not use the copy and paste function for the OTP or enrollment strings because the clipboard is shared among all applications running on a device.
-
To generate a passcode, select the refresh icon
.
Generate a passcode with challenge-response authenticators
To generate a passcode on a challenge-response authenticator, you must first receive the challenge code. To receive the challenge code, follow the procedure used in your organization.
-
Open the SafeNet MobilePASS+ app.
-
If there is more than one authenticator, select the required authenticator.
-
Enter the provided challenge code.
-
Select Submit. The passcode displays.
-
To generate another passcode, select the refresh icon
, and then repeat the process.
