A hardware-based OTP generation device that can not be replicated is presented. The OTP generation device may include a PUF that generates a unique PIN. Also, this OTP generation device is used for 2-factor authentication together with existing security factors.