TOTPs (Time-based One-Time Passwords) are generated exclusively in the browser and are not sent to the server.