---
title: One Time Passwords
slug: one-time-passwords
docTags: 
createdAt: 2025-11-09T22:00:22.532Z
---

The **Activate One-Time Password (OTP)** capability enhances account security by introducing short-lived, single-use authentication codes used during password resets and identity verification processes.

# Overview

OTPs provide a second layer of verification, ensuring that only authorised users can complete sensitive actions such as password resets. Each code is unique, expires after a set period, and cannot be reused.

# Capability Summary

Activate supports multiple OTP generation and delivery options:

- **Generation:** Numeric or alphanumeric codes of configurable length and expiry. 
- **Delivery:** Sent via email, SMS, or other secure messaging channels. 
- **Validation:** Automatically verified within workflows for self-service password reset and identity confirmation. 

OTPs integrate seamlessly with Activate’s self-service features and can be combined with Password Generation for stronger authentication assurance.

# Use Cases

- Verifying user identity before password reset. 
- Securing privileged actions or system access. 
- Providing temporary verification for external or remote users. 

This capability strengthens Activate’s overall authentication framework by combining convenience with compliance-grade security.