OTP Verification

OTP Verification for Magento 2 adds an extra layer of security to customer accounts and important store activities. It allows store owners to enable OTP verification for registration, login, forgot password, and checkout based on their security requirements.

The module supports OTP delivery through Email, SMS, or both. Store owners can also control important OTP settings such as the number of digits, expiry time, verification attempts, resend time, and hourly OTP request limits.

It also provides Authenticator App support for both customers and admins. Customers can use recovery codes if they cannot access their authenticator app, while admins can secure the Magento admin panel with Google Authenticator-based two-factor authentication.

Business Value

OTP Verification module helps merchants strengthen store security while protecting customer accounts and sensitive activities from unauthorized access.

By enabling OTP-based verification, merchants can:

• Reduce fraudulent account creation and unauthorized logins with OTP checks.
• Protect the password reset process with an additional verification step.
• Secure checkout activity, including guest checkout, with OTP confirmation.
• Choose flexible delivery channels through Email, SMS, or both to suit customer preferences.
• Add an extra layer of protection to the Magento admin panel with two-factor authentication.
• Give customers a secure backup option through recovery codes if their authenticator app is unavailable.
• Control OTP behavior precisely with configurable digits, expiry, attempts, and request limits.

Features

• Email & SMS OTP Verification: Send OTPs through Email, SMS, or both according to the configured delivery channel.
• Flexible OTP Settings: Configure OTP digits, expiry time, maximum attempts, resend delay, and hourly request limits.
• Registration Verification: Require customers to verify their account using an OTP during registration.
• Login Verification: Require customers to enter an OTP each time they log in.
• Forgot Password Verification: Verify customers with an OTP before they reset their password.
• Checkout Verification: Require OTP verification before placing orders through selected payment methods.
• Guest Checkout Verification: Require guest customers to complete OTP verification during checkout.
• Authenticator App Support: Allow customers to generate OTPs using an authenticator app.
• Recovery Codes: Provide backup codes that can be used when the authenticator app is unavailable.
• Admin Two-Factor Authentication: Protect the Magento admin panel with Google Authenticator-based 2FA.
• Admin 2FA Management: View configured admin authenticators and reset their existing 2FA setup when required.

How Does It Work?

Step 1: Enable OTP Verification

The admin enables OTP verification for the required activities, such as registration, login, forgot password, or checkout, based on store security needs.

Step 2: Configure Delivery Channel and OTP Settings

The admin selects Email, SMS, or both as the delivery channel and configures OTP digits, expiry time, maximum attempts, resend delay, and hourly request limits.

Step 3: Set Up Authenticator App and Recovery Codes

The admin enables authenticator app support for customers and configures recovery codes as a backup verification option.

Step 4: Secure the Admin Panel

The admin enables Google Authenticator-based two-factor authentication for the Magento admin panel and manages configured admin authenticators as needed.

Step 5: Customer Completes an Action

When a customer registers, logs in, resets a password, or checks out, the module triggers an OTP based on the configured settings.

Step 6: Customer Verifies the OTP

The customer receives the OTP via Email or SMS, or generates it through an authenticator app, and enters it to complete the verification.

Step 7: Action Confirmed

Once the OTP is verified successfully, the customer's registration, login, password reset, or order is confirmed and processed.

Benefits for Admin

• Stronger Store Security: Protect registration, login, password reset, and checkout with OTP-based verification.
• Flexible Configuration: Control OTP digits, expiry time, attempts, resend delay, and request limits based on business needs.
• Multiple Delivery Options: Choose Email, SMS, or both for sending OTPs to customers.
• Admin Panel Protection: Secure the Magento admin panel with Google Authenticator-based two-factor authentication.
• Centralized 2FA Management: View and reset admin authenticator setups directly from the admin panel.
• Guest Checkout Security: Extend OTP verification to guest customers during checkout for added protection.

Benefits for Customers

• Secure Account Access: Verify registration and login activities with OTP for added account safety.
• Safer Password Recovery: Reset passwords securely with OTP-based verification.
• Flexible Verification: Receive OTPs via Email, SMS, or generate them through an authenticator app.
• Backup Access: Use recovery codes to verify identity if the authenticator app is unavailable.
• Confident Checkout: Complete purchases with an added layer of security during checkout.

Support

For assistance with the OTP Verification module, configuration, or any related queries, feel free to reach out to our support team.

Email: sales@ecarter.co