<p>MksDdn Reddy Auth provides OTP-based authentication with:</p>
<ul>
<li>WordPress cookie session login for the frontend (shortcode, or REST with <code>issue_session: true</code>).</li>
<li>Optional Bearer token issuing for REST clients (<code>issue_token: true</code>; cookie not set by default on REST login).</li>
<li>Rate limiting and one-time OTP verification.</li>
<li>Optional site and REST API protection for unauthenticated visitors.</li>
<li>Optional allowed request sources (Origin/Referer) for plugin REST endpoints.</li>
</ul>
<p>The plugin maps each Reddy ID to a WordPress user and can create an account automatically on first successful login.</p>
<h3>Getting Started</h3>
<h4>1. Configure the Reddy bot token</h4>
<p>For production, define the token in <code>wp-config.php</code>:</p>
<pre><code>define( 'MKSDDN_REDDY_BOT_TOKEN', 'your-bot-token' );
</code></pre>
<p>For local development you can store the token in <strong>Settings > Reddy Auth</strong> instead. Use <strong>Bot connection test</strong> to verify delivery to a Reddy user.</p>
<h4>2. Set up the login page</h4>
<p>Create a WordPress page (for example, <code>/login/</code>) and insert:</p>
<pre><code>[mksddn_reddy_login]
</code></pre>
<p>Users enter their Reddy ID, receive a one-time code in Reddy, and sign in through the form.</p>
<h4>3. Review protection settings</h4>
<p>By default, both protection options are <strong>disabled</strong> so your site stays accessible after activation. Enable them only after the login page is configured:</p>
<ul>
<li><strong>Protect site content</strong> — redirects unauthenticated visitors to the login page.</li>
<li><strong>Protect all REST API content</strong> — returns <code>401</code> for protected REST routes.</li>
</ul>
<p>Public auth routes remain available without login:</p>
<ul>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/send-code</code></li>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/login</code></li>
<li><code>GET /wp-json/mksddn-reddy-auth/v1/auth/intent-status</code></li>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/intent-status</code></li>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/complete-intent</code></li>
</ul>
<p>Webhook callback route is also public for BotMother integration:</p>
<ul>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/button-callback</code></li>
</ul>
<h4>4. Use REST API for headless clients</h4>
<p>Typical flow:</p>
<ol>
<li><code>POST /auth/send-code</code> with <code>{ "reddy_id": "123456" }</code></li>
<li><code>POST /auth/login</code> with <code>{ "reddy_id": "123456", "code": "111111", "issue_token": true }</code> for headless clients. Add <code>"issue_session": true</code> only when the browser must also receive a WordPress cookie (same-origin SPA).</li>
<li>Call protected REST routes with <code>Authorization: Bearer <token></code>.</li>
<li><code>GET /auth/me</code> to read the current user (Bearer or cookie session).</li>
<li><code>POST /auth/logout</code> to end the cookie session and revoke the Bearer token when provided.</li>
</ol>
<p>One-click flow:</p>
<ol>
<li><code>POST /auth/send-code</code> returns <code>intent_id</code> and <code>intent_secret</code> when one-click is enabled.</li>
<li>Poll <code>GET|POST /auth/intent-status</code> with <code>intent_id</code> + <code>intent_secret</code>.</li>
<li>After approval, finalize auth via <code>POST /auth/complete-intent</code> with <code>intent_id</code>, <code>intent_secret</code>, and optional <code>issue_token</code> / <code>issue_session</code>.</li>
</ol>
<p>For one-click polling, <code>intent-status</code> supports both:</p>
<ul>
<li><code>GET /auth/intent-status</code> with <code>intent_id</code> + <code>intent_secret</code> query params.</li>
<li><code>POST /auth/intent-status</code> with <code>intent_id</code> + <code>intent_secret</code> in JSON body.</li>
</ul>
<p><strong>Protect site content</strong> checks the WordPress cookie session (shortcode login or REST login with <code>issue_session: true</code>). It does not accept Bearer tokens. <strong>Protect all REST API content</strong> requires a Bearer token and ignores cookie-only sessions.</p>
<p>Download OpenAPI and Postman files from <strong>Settings > Reddy Auth > Developer Resources</strong>.</p>
<h4>5. Optional: restrict REST callers by browser source</h4>
<p>In <strong>Settings > Reddy Auth</strong>, <strong>Allowed request sources</strong> limits plugin REST traffic (<code>/mksddn-reddy-auth/v1/*</code>) to listed <code>Origin</code> or <code>Referer</code> URLs. Leave empty to allow any client (recommended for server-to-server integrations). This is a soft guard for browser apps, not a secret key.</p>
<h4>6. Optional: harden one-click webhook verification</h4>
<p>In <strong>Settings > Reddy Auth > One-Click Authorization</strong>, set <strong>Webhook secret (optional)</strong> to match BotMother webhook Secret.</p>
<ul>
<li>With a configured secret, webhook signature verification uses <code>sha256(body + bot_token + "." + webhook_secret)</code>.</li>
<li>With an empty secret, compatibility mode uses <code>sha256(body + bot_token)</code>.</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to the <strong>Reddy bot API</strong> at <code>https://bot.reddy.team</code> to deliver one-time passwords and optional admin connection test messages.</p>
<p><strong>What the service is used for</strong></p>
<ul>
<li>Deliver OTP codes to a Reddy user during login.</li>
<li>Send an optional admin “bot connection test” message from <strong>Settings > Reddy Auth</strong>.</li>
</ul>
<p><strong>What data is sent and when</strong></p>
<ul>
<li><strong>OTP send / login:</strong> Reddy user ID (<code>userKey</code>) and message text containing the one-time code (and expiry hint). Message text is configurable in <strong>Settings > Reddy Auth > Bot Messages</strong> (placeholders <code>{code}</code>, <code>{ttl}</code>). Sent when a user requests a code via the login form or REST API.</li>
<li><strong>Bot connection test:</strong> Reddy user ID (<code>userKey</code>) and a configurable test message from <strong>Settings > Reddy Auth > Bot Messages</strong>. Sent only when an administrator runs <strong>Bot connection test</strong> in <strong>Settings > Reddy Auth</strong>.</li>
<li><strong>Bot token:</strong> Your bot token is included in the API request URL path (configured via <code>MKSDDN_REDDY_BOT_TOKEN</code> in <code>wp-config.php</code> or the development fallback field in settings). It is not sent to WordPress.org.</li>
</ul>
<p>Data is transmitted only when OTP delivery or the connection test is triggered. The plugin does not send site content, post data, or WordPress user passwords to Reddy.</p>
<p>This service is provided by Reddy: terms of use and privacy policy at https://help.reddy.team/pages/user-agreement</p>
<p>No other third-party services are required for core plugin operation.</p>


MksDdn Reddy Auth

Authenticate WordPress users via Reddy OTP flow for monolith and REST API clients.

miniorange

twofactorauthentication

<p><strong>Multi-Factor Authentication – Two Factor (2FA/OTP)</strong> – Multi-factor authentication can be configured for any TOTP-based authentication method like Google Authenticator, Microsoft Authenticator, etc to secure your WordPress website. It also supports OTP Over SMS, OTP Over Email, Duo Authenticator, Microsoft Authenticator, OTP Over WhatsApp, OTP Over Telegram, and many more authentication methods.</p>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/BS6tY-Goa1Q?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<p><strong>Note: The two-factor plugin is GDPR Compliant and supports a wide variety of Language Translations</strong></p>
<h4>Google Authenticator ( 2FA, Two Factor Authentication ) sync on multiple websites with the same OTP</h4>
<p>You only need to configure <strong>Google Authenticator</strong> and other Two Factor Authentication ( 2FA ) methods once even on a multisite environment. This configuration will then be automatically reflected on the entire network. This is available for Google Authenticator, Duo Authenticator, Microsoft Authenticator, Security Questions, LastPass, Authy, miniOrange methods, OTP over SMS, and OTP over Email. It is supported only if you are using our MFA cloud services.</p>
<h4>supports variety of WordPress forms</h4>
<ul>
<li><a href="https://wordpress.org/plugins/ultimate-member/" rel="ugc">Ultimate Member – User Profile & Membership Form</a></li>
<li><a href="https://wordpress.org/plugins/restrict-content/" rel="ugc">Restrict Content Form</a></li>
<li><a href="https://wordpress.org/plugins/theme-my-login/" rel="ugc">My theme Login Form</a></li>
<li><a href="https://wordpress.org/plugins/user-registration" rel="ugc">User Registration – Custom Registration Form</a></li>
<li><a href="https://wordpress.org/plugins/loginpress/" rel="ugc">Custom Login Page Customizer Form</a></li>
<li><a href="https://wordpress.org/plugins/admin-custom-login/" rel="ugc">Admin Custom Login Form</a></li>
<li><a href="https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/" rel="ugc">RegistrationMagic – Custom Registration Forms</a><br />
and more.</li>
</ul>
<h4>Features</h4>
<ul>
<li>We support multi-factor authentication for all types of devices.</li>
<li>Simplified & user friendly UI to set up Google Authenticator and other Two Factor Authentication ( 2FA/TFA/MFA ) methods.</li>
<li><strong>Variety of Authentication Methods:</strong> Any application supporting OTP methods like Google Authenticator, OTP over SMS, Duo Authenticator, OTP over EMAIL, Authy Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, and Security Questions(KBA)</li>
<li>Two Factor Authentication (2FA/TFA) allows authentication on the login page itself for Google Authenticator </li>
</ul>
<h4>How is miniOrange Two Factor Authentication different?</h4>
<ul>
<li>We support multiple authentication methods and also provide the option of a backup method.</li>
<li>We support Device Identification or remember device features.</li>
<li>We support MFA methods like OTP over SMS, OTP over Email, etc for the Woocommerce frontend login theme.</li>
<li>ShortCode is now available for different frontend custom login pages and Premium themes as well.</li>
</ul>
<h4>Multi-Factor Authenticator ( 2FA/OTP )</h4>
<p><a href="https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa#pricing" rel="nofollow ugc">Premium Plugin Features</a></p>
<ul>
<li>Two Factor Authentication (2FA) for Users as per the upgrade <em>( Site-based pricing )</em></li>
<li><strong>Two-Factor Authentication Methods:</strong> <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/google-authenticator" rel="nofollow ugc">Google Authenticator</a>, <a href="https://youtu.be/fV-VnC_5Q5c" rel="nofollow ugc">Authy Authenticator</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/microsoft-authenticator" rel="nofollow ugc">Microsoft Authenticator</a>, <a href="https://plugins.miniorange.com/two-factor-authentication-2fa-mfa-for-user-registration-login-form" rel="nofollow ugc">LastPass Authenticator</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-security-question" rel="nofollow ugc">Security Questions</a>, OTP Authentication( OTP Over Email & OTP Over SMS), Email Verification, Mobile Verification <em>( SMS credits need to be purchased as per the need)</em></li>
<li><strong><a href="https://docs.miniorange.com/documentation/login-username-2nd-factor-2" rel="nofollow ugc">Multiple Login Options</a>:</strong> Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. You can opt between a password and 2FA or only a second factor</li>
<li><a href="https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role" rel="nofollow ugc">Role based MFA</a></li>
<li><strong>Backup Method:</strong> KBA(Security Questions), OTP over Email</li>
<li>Multisite compatible</li>
<li><a href="https://docs.miniorange.com/documentation/custom-redirect-login-url" rel="nofollow ugc">User role based redirection after Login</a></li>
<li><a href="https://docs.miniorange.com/documentation/google-authenticator-app-name" rel="nofollow ugc">Customize account name in Google Authenticator app</a></li>
<li><a href="https://docs.miniorange.com/documentation/custom-security-questions" rel="nofollow ugc">Custom Security Questions (KBA)</a></li>
</ul>
<h4>Multi Factor Authenticator ( 2FA/OTP )</h4>
<p><a href="https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa#pricing" rel="nofollow ugc">Premium Plugin(All Inclusive) Features</a></p>
<ul>
<li>Two Factor Authentication (2FA) for Users as per the upgrade <em>( Site-based pricing )</em></li>
<li><strong>Two-Factor Authentication Methods:</strong> <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/google-authenticator" rel="nofollow ugc">Google Authenticator</a>, <a href="https://youtu.be/fV-VnC_5Q5c" rel="nofollow ugc">Authy Authenticator</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/microsoft-authenticator" rel="nofollow ugc">Microsoft Authenticator</a>, <a href="https://plugins.miniorange.com/two-factor-authentication-2fa-mfa-for-user-registration-login-form" rel="nofollow ugc">LastPass Authenticator</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-security-question" rel="nofollow ugc">Security Questions</a>, OTP Authentication( OTP Over Email & OTP Over SMS), Email Verification, Mobile Verification <em>( SMS credits need to be purchased as per the need)</em></li>
<li><strong><a href="https://docs.miniorange.com/documentation/login-username-2nd-factor-2" rel="nofollow ugc">Multiple Login Options</a>:</strong> Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. You can opt between a password and 2FA or only a second factor.</li>
<li><strong>Unlimited Email transactions</strong></li>
<li><strong>Backup Method:</strong> KBA (Security Questions), OTP Over Email, Backup codes</li>
<li><a href="https://docs.miniorange.com/documentation/custom-redirect-login-url" rel="nofollow ugc">User role based redirection after Login</a></li>
<li><a href="https://docs.miniorange.com/documentation/google-authenticator-app-name" rel="nofollow ugc">Customize account name in Google Authenticator app</a></li>
<li><a href="https://docs.miniorange.com/documentation/custom-security-questions" rel="nofollow ugc">Custom Security Questions (KBA)</a></li>
<li><a href="https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role" rel="nofollow ugc">Role based 2 Factor</a></li>
<li><a href="https://docs.miniorange.com/documentation/enforce-2fa-users" rel="nofollow ugc">Force Two-factor for users</a></li>
<li><a href="https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor" rel="nofollow ugc">Email notification to users asking them to set up Two-Factor Authentication (WP 2FA/TFA)</a></li>
<li><a href="https://docs.miniorange.com/documentation/privacy-policy-site" rel="nofollow ugc">Set Privacy Policy for users</a></li>
<li><a href="https://docs.miniorange.com/documentation/remember-my-device" rel="nofollow ugc">Remember Device to skip 2fa</a></li>
<li><strong>Customizable Login UI Popup:</strong> Using google authenticator plugin you can customize the user interface of the login popup as per your preference</li>
<li>Multisite compatible (only 3 subsites)</li>
</ul>
<h4>Multi-Factor Authenticator ( 2FA/OTP )</h4>
<p><a href="https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa#pricing" rel="nofollow ugc">Enterprise Plugin Features</a></p>
<ul>
<li>Two Factor Authentication (2FA) for Users as per the upgrade <em>( User-based pricing )</em></li>
<li><strong>Available Authentication Methods:</strong> <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/google-authenticator" rel="nofollow ugc">Google Authenticator</a>, <a href="https://youtu.be/fV-VnC_5Q5c" rel="nofollow ugc">Authy Authenticator</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/microsoft-authenticator" rel="nofollow ugc">Microsoft Authenticator</a>, <a href="https://plugins.miniorange.com/two-factor-authentication-2fa-mfa-for-user-registration-login-form" rel="nofollow ugc">LastPass Authenticator</a>, QR Code, <a href="https://plugins.miniorange.com/two-factor-authentication-2fa-mfa-for-user-registration-login-form" rel="nofollow ugc">Push Notification</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-soft-token" rel="nofollow ugc">Soft Token</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-soft-token" rel="nofollow ugc">Security Questions(KBA)</a>, OTP Authentication(<a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/otp_over_email" rel="nofollow ugc">OTP Over Email</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-otp-over-sms" rel="nofollow ugc">OTP Over SMS</a> or OTP Over SMS and Email), <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/email_verification" rel="nofollow ugc">Email Verification</a>, <a href="https://mail.google.com/mail/u/0/?fs=1&tf=cm&source=mailto&su=TWO+FACTOR+WORDRESS+-+Hardware+Token+2FA+Method+.&to=2fasupport@xecurify.com&body=I+am+interested+in+the+Hardware+Token+method+of+the+2FA+plugin.+" rel="nofollow ugc">Hardware Token</a> <em>( SMS and Email credits need to be purchased for successful OTP authentication as per the need)</em></li>
<li><strong>Multiple Login Options:</strong> Username + password + two-factor Authentication (or) Username + two-factor authentication(2FA) i.e. <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/passwordless-login" rel="nofollow ugc">Passwordless login /Login without password</a>.</li>
<li><strong>Backup Methods:</strong> <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-security-question" rel="nofollow ugc">KBA(Security Questions)</a>, <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/otp_over_email" rel="nofollow ugc">OTP Over Email</a>, <a href="https://plugins.miniorange.com/wordpress-two-factor-authentication-setup-guides#" rel="nofollow ugc">Backup Codes</a></li>
<li><strong><a href="https://plugins.miniorange.com/two-factor-authentication-2fa-for-multiple-wordpress-websites" rel="nofollow ugc">Sync 2fa for multiple websites</a></strong></li>
<li><strong>Multisite compatible</strong> for all WordPress 2FA methods</li>
<li>Email notification to users asking them to set up Google Authenticator – Two-Factor Authentication (WP 2FA/TFA)</li>
<li><a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/custom-redirect-login-url" rel="nofollow ugc">User <strong>role based redirection</strong></a> after Login, Custom Security Questions (KBA), Customizable account name in Google Authenticator app</li>
<li><a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/specific-set-authentication-methods-based-role" rel="nofollow ugc">Enable Two-Factor Authentication (WP 2FA/OTP) for specific Users/User Roles</a></li>
<li>Choose specific two-factor authentication methods for Users</li>
<li><strong>Add-Ons Included:</strong> <a href="https://developers.miniorange.com/docs/security/wordpress/wp-security/remember-my-device" rel="nofollow ugc">RBA & Trusted Devices Management Add-on</a>, <a href="https://plugins.miniorange.com/wordpress-two-factor-authentication-setup-guides#" rel="nofollow ugc">Personalization Add-on</a> and <a href="https://plugins.miniorange.com/wordpress-two-factor-authentication-setup-guides#" rel="nofollow ugc">Short Codes Add-on</a></li>
<li><strong>Brute force attack prevention, IP Blocking & User login Monitoring</strong></li>
<li>File protection & strong password</li>
<li>Monitoring current Google Authenticator and other two-factor authentication (2 Factor) method of all the users in the plugin</li>
<li><a href="https://plugins.miniorange.com/wordpress-two-factor-authentication-setup-guides#" rel="nofollow ugc">Session restriction</a></li>
</ul>
<h3>Multi factor authentication ( 2FA / MFA )</h3>
<p>You can configure multiple WordPress 2FA methods like google authenticator, OTP over Email, OTP over SMS, etc, and choose any one method from a list of configured methods to use as 2FA for your WordPress website. Multi-factor authentication is helpful for cases such as when you do not have your phone and cannot access your TOTP app for login. You can then use other MFA methods like OTP over Email to login.</p>
<p>Check all the features other than MFA ( 2FA ) here: <a href="https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa#pricing" rel="nofollow ugc">miniOrange Website</a>.</p>
<h4>Why do you need to register for Multi-Factor authentication?</h4>
<p>Multi-Factor authentication uses miniOrange APIs to communicate between your WP website and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users’ calls can only be accessed by API keys assigned to you.<br />
Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts on WordPress 2FA like Google Authenticator. Single code generated in Google Authenticator will be enough to login to all sites. With this, you can also achieve sync of two factor authentication across multiple sites. This helps to provide a secure WP 2FA cloud solution.</p>
<h4>Useful blog posts about two factor authentication ( 2FA/MFA ) plugin </h4>
<ul>
<li><a href="https://themeisle.com/blog/how-to-add-two-factor-authentication-to-wordpress/" rel="nofollow ugc">Beginner’s Guide: How to Add Two Factor Authentication to WordPress</a></li>
<li><a href="https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/" rel="nofollow ugc">How to Add WordPress Two Factor Authentication (2FA/TFA)</a></li>
</ul>
<h4>OTP OVER WHATSAPP</h4>
<p>With <a href="https://plugins.miniorange.com/login-with-whatsapp-as-a-two-factor-method-for-wordpress" rel="nofollow ugc">OTP over WhatsApp</a>, users can receive OTP via the world’s most popular messaging app, WhatsApp as 2FA. Click here to download the <a href="https://miniorange.s3.amazonaws.com/public/plugins/WordPress/2FA/login-with-whatsapp-otp-2fa-1.0.0.zip" rel="nofollow ugc">Login with WhatsApp plugin</a>.</p>
<h4>OTP USING FIREBASE</h4>
<p>This add-on allows you to use Firebase SMS transactions to send OTP via SMS as 2FA. Using this add-on, you can get upto 10,000 SMS transactions a month to send OTPs. For further information, please contact us at <a href="https://mail.google.com/mail/u/0/?fs=1&tf=cm&source=mailto&su=TWO+FACTOR+WORDRESS+-+WP+Firebase+Authentication+Trial+Request.&to=2fasupport@xecurify.com&body=I+want+to+request+a+trial+of+the+Firebase+Authentication+plugin.+" rel="nofollow ugc">2fasupport@xecurify.com</a>.</p>
<h4>OTP FOR SELECTED COUNTRIES</h4>
<p>This is an add-on which allows <strong>OTP Verification to be enabled for selected list of countries only</strong>. OTP Verification for any other country not in the list will be blocked.</p>
<h4>BULK SMS AND OTP</h4>
<p>This is an add-on which allows <strong>Admin to send Custom SMS and OTP Verification codes in bulk</strong>. Upload the CSV file or enter the numbers manually along with the SMS template that needs to be sent in bulk.</p>
<h4>LIMIT OTP REQUEST</h4>
<p>This is an add-on which allows <strong>Blocking of OTP codes from being sent out before the set timer is up.</strong> This Addon helps in limiting malicious users or unwanted OTP requests to be made by blocking the user for the time limit set.</p>
<h4>OTP OVER PHONE CALL</h4>
<p>This is an add-on which allows <strong>OTP Verification over Phone Call instead of SMS.</strong> The code will be received via a phone call to the customer.</p>
<h4>VERIFICATION VIA EMAIL LINK</h4>
<p>This is an add-on which allows <strong>User Verification</strong> via accept/reject links received on the email instead of OTP codes.</p>


Two Factor Authentication (2FA , MFA, OTP SMS and Email)

Two-factor authentication (2FA / MFA) for all your users / user roles.

MksDdn Reddy Auth vs Two Factor Authentication (2FA , MFA, OTP SMS and Email)