Login with a one-time password (OTP)
One-time passcodes (OTP) represent a significant security upgrade over traditional username and password authentication by generating unique, time-sensitive codes that expire after a single use or short time window. This authentication method eliminates many of the vulnerabilities associated with static passwords while providing a more streamlined user experience.
Key Benefits of OTP Authentication:
Enhanced Security - Each code is unique and expires quickly, making it virtually impossible for attackers to reuse intercepted credentials or conduct replay attacks
Elimination of Password Fatigue - Users no longer need to create, remember, or manage complex passwords, reducing the cognitive burden and frustration of password management
Reduced Risk of Data Breaches - Since no static passwords are stored in your system, credential databases become significantly less valuable targets for cybercriminals
Protection Against Common Attacks - OTP authentication is immune to password-based attacks like credential stuffing, brute force attempts, and dictionary attacks
Improved User Experience - Users can authenticate quickly without worrying about forgotten passwords, password complexity requirements, or frequent password resets
Lower Support Costs - Dramatically reduces password reset requests and account lockout issues, decreasing the burden on customer support teams
Compliance Benefits - Helps meet regulatory requirements for strong authentication while demonstrating a commitment to modern security practices
Enabling One Time Passwords (OTP) in Your Application via Next Identity Console
To enable One time passcode authentication in your application, follow these steps:
Log in to the Next Identity console.
Navigate to the Journeys screen, and select the Journey you would like to enable OTP for, click on the edit icon (pencil).
The journey builder canvas page will load, showing you the current workflow for that journey, it will include a login card that will display what the current login method is (for example, email and password).
If OTP is not yet enabled:
Click on the edit icon on the login card.
A configure login window will open.
Within that window, you can toggle the primary identifier as well as the authentication method (one option should be OTP). Select your desired option.
Click Save changes.
Review the changes and save the updated journey in your lowest environment, typically Development, before propagating to upper environments.