 They are often random or pseudo-random numbers.Many nonces also include a timestamp to ensure exact timeliness, though this requires clock synchronization between organizations.The addition of a client nonce ("cnonce") helps to improve the security in some ways as implemented in digest access authentication.