Here's another OTP OATH generator called Androidtoken:



http://code.google.com/p/androidtoken/

It seems to offer a PIN password protected seed, which is nice. It also supports event tokens and time tokens.

I can appreciate that software OTPs are less 'something you have' as information is very easy to replicate, but I'm glad that measures have been taken to protect the 'something you have' information with 'something you know' in the case of compromise.

Even with a software implemented token for OTP, it's much more secure than simply a password alone.