diff --git a/ajax.php b/ajax.php
index 347fec6e..36b232db 100644
--- a/ajax.php
+++ b/ajax.php
@@ -9,7 +9,7 @@
 require_once "config.php";
 require_once "functions.php";
 require_once "check_login.php";
-require_once "functions/totp.php";
+require_once "plugins/totp/totp.php";
 
 /*
  * Fetches SSL certificates from remote hosts & returns the relevant info (issuer, expiry, public key)
diff --git a/guest/guest_ajax.php b/guest/guest_ajax.php
index 2c5dfc18..43ee2203 100644
--- a/guest/guest_ajax.php
+++ b/guest/guest_ajax.php
@@ -11,7 +11,7 @@ require_once "../config.php";
 // Set Timezone
 require_once "../inc_set_timezone.php";
 require_once "../functions.php";
-require_once "../functions/totp.php";
+require_once "../plugins/totp/totp.php";
 
 
 /*
diff --git a/login.php b/login.php
index 33f999c7..e26599a8 100644
--- a/login.php
+++ b/login.php
@@ -21,7 +21,7 @@ if ($config_https_only && (!isset($_SERVER['HTTPS']) || $_SERVER['HTTPS'] !== 'o
 
 require_once "functions.php";
 
-require_once "functions/totp.php";
+require_once "plugins/totp/totp.php";
 
 
 // IP & User Agent for logging
diff --git a/functions/totp.php b/plugins/totp/totp.php
similarity index 100%
rename from functions/totp.php
rename to plugins/totp/totp.php
diff --git a/post/user/profile.php b/post/user/profile.php
index 78a88600..0ff38f49 100644
--- a/post/user/profile.php
+++ b/post/user/profile.php
@@ -193,7 +193,7 @@ if (isset($_POST['edit_your_user_preferences'])) {
 
 if (isset($_POST['verify'])) {
 
-    require_once "functions/totp.php";
+    require_once "plugins/totp/totp.php";
 
     $currentcode = intval($_POST['code']);  //code to validate, for example received from device
 
diff --git a/user_security.php b/user_security.php
index d460c79b..7c26d3c6 100644
--- a/user_security.php
+++ b/user_security.php
@@ -52,7 +52,7 @@ $remember_token_count = mysqli_num_rows($sql_remember_tokens);
             <center>
                 <?php
 
-                require_once 'functions/totp.php';
+                require_once 'plugins/totp/totp.php';
 
                 //Generate a base32 Key
                 $secretkey = key32gen();