# \#otp

**URL:** https://community.auth0.com/tag/otp/1238.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [Feature request: Custom label for OTP in authenticator](https://community.auth0.com/t/feature-request-custom-label-for-otp-in-authenticator/186114)

<div class="topic-metadata">

**Author:** [@greg14](https://community.auth0.com/u/greg14)\
**Replies:** 4\
**Last updated:** [October 23, 2026, 12:51pm UTC](https://community.auth0.com/t/feature-request-custom-label-for-otp-in-authenticator/186114 "2026-10-23T12:51:15Z")

</div>

Feature: Provide a way to assign the tenant name to MFA clients even if the user is in an organization. Description: There have been multiple posts around this, best explained by: and Use-case: B2B SaaS. Essentially…

---

## [Email OTP login using "verify\_email\_by\_code" template instead of "auth\_email\_by\_code"](https://community.auth0.com/t/email-otp-login-using-verify-email-by-code-template-instead-of-auth-email-by-code/203597)

<div class="topic-metadata">

**Author:** [@Sahid.Rosas](https://community.auth0.com/u/Sahid.Rosas)\
**Replies:** 2\
**Last updated:** [September 25, 2026, 6:16pm UTC](https://community.auth0.com/t/email-otp-login-using-verify-email-by-code-template-instead-of-auth-email-by-code/203597 "2026-09-25T18:16:56Z")

</div>

While testing the login flow in my application, I noticed my custom template for auth\_email\_by\_code (Authentication Email (Code)) was not being used during login after sending the code. Instead, verify\_email\_by\_code (Ver…

---

## [When implementing embedded login, how do we use the JWT token given?](https://community.auth0.com/t/when-implementing-embedded-login-how-do-we-use-the-jwt-token-given/85614)

<div class="topic-metadata">

**Author:** [@erin1](https://community.auth0.com/u/erin1)\
**Replies:** 1\
**Last updated:** [June 27, 2022, 5:39pm UTC](https://community.auth0.com/t/when-implementing-embedded-login-how-do-we-use-the-jwt-token-given/85614 "2022-06-27T17:39:55Z")

</div>

Using the steps ‘Send a one-time-use password via SMS’ and ‘Authenticate an SMS user’ Embedded Passwordless Login in Native Applications, we can successfully authenticate a phone number. We are not using MFA, so only the…

---

## [How do I implement Embedded Login using OTP (sms) and MFA?](https://community.auth0.com/t/how-do-i-implement-embedded-login-using-otp-sms-and-mfa/85231)

<div class="topic-metadata">

**Author:** [@erin1](https://community.auth0.com/u/erin1)\
**Replies:** 3\
**Last updated:** [June 23, 2022, 7:13am UTC](https://community.auth0.com/t/how-do-i-implement-embedded-login-using-otp-sms-and-mfa/85231 "2022-06-23T07:13:05Z")

</div>

I am having trouble setting up OTP and MFA using embedded login for our application. Using Twillio and Auth0, I have managed to set up a phone number that sends a OTP. From here, using API calls we are able to use this …

---

## [How to set up a passwordless sign up flow with only OTP?](https://community.auth0.com/t/how-to-set-up-a-passwordless-sign-up-flow-with-only-otp/85296)

<div class="topic-metadata">

**Author:** [@erin1](https://community.auth0.com/u/erin1)\
**Replies:** 3\
**Last updated:** [June 23, 2022, 12:43am UTC](https://community.auth0.com/t/how-to-set-up-a-passwordless-sign-up-flow-with-only-otp/85296 "2022-06-23T00:43:44Z")

</div>

Is there anyway of implementing a sign-up flow where a user only has to enter 1 OTP sent to their phone. We have used Twillio and implemented the OTP to be sent to phone but it seems like you have to use MFA, meaning ano…

---

## [Resend Passwordless OTP](https://community.auth0.com/t/resend-passwordless-otp/79257)

<div class="topic-metadata">

**Author:** [@vishwakarma.anchal19](https://community.auth0.com/u/vishwakarma.anchal19)\
**Replies:** 8\
**Last updated:** [May 20, 2022, 4:52pm UTC](https://community.auth0.com/t/resend-passwordless-otp/79257 "2022-05-20T16:52:31Z")

</div>

I am signup user using passwordless SMS (otp) is there any way to resend OTP again.

---

## [Old OTP code works after new one generated](https://community.auth0.com/t/old-otp-code-works-after-new-one-generated/76887)

<div class="topic-metadata">

**Author:** [@serhii1](https://community.auth0.com/u/serhii1)\
**Replies:** 1\
**Last updated:** [January 25, 2022, 4:42pm UTC](https://community.auth0.com/t/old-otp-code-works-after-new-one-generated/76887 "2022-01-25T16:42:09Z")

</div>

While MFA integration found that previously generated OTP code legal to use after new one was generated. Did anyone face this issue?

---

## [Custom param in password less (OTP)](https://community.auth0.com/t/custom-param-in-password-less-otp/74810)

<div class="topic-metadata">

**Author:** [@Prabhat0123](https://community.auth0.com/u/Prabhat0123)\
**Replies:** 3\
**Last updated:** [December 20, 2021, 2:40pm UTC](https://community.auth0.com/t/custom-param-in-password-less-otp/74810 "2021-12-20T14:40:35Z")

</div>

Hi Folks , We have a requirement of password less login for user. We have security requirements that every OTP should be linked to a ref code. Refcode and OTP will be sent to user via email/sms. In order to successfull…

---

## [SMS OTP Restrictions](https://community.auth0.com/t/sms-otp-restrictions/73290)

<div class="topic-metadata">

**Author:** [@regnauld.ethan](https://community.auth0.com/u/regnauld.ethan)\
**Replies:** 1\
**Last updated:** [November 17, 2021, 12:11pm UTC](https://community.auth0.com/t/sms-otp-restrictions/73290 "2021-11-17T12:11:50Z")

</div>

Hi all, I’m trying to understand whether there’s any limitation of requesting OTP SMS such as throttling (i.e. limit of 3 requests within 30 minutes) or gap time between requests (i.e. new requests can be done after 1 m…

---

## [Authorization Code and Access Token Variable Size affect OTP code?](https://community.auth0.com/t/authorization-code-and-access-token-variable-size-affect-otp-code/71771)

<div class="topic-metadata">

**Author:** [@Marmosquera](https://community.auth0.com/u/Marmosquera)\
**Replies:** 1\
**Last updated:** [October 21, 2021, 6:04pm UTC](https://community.auth0.com/t/authorization-code-and-access-token-variable-size-affect-otp-code/71771 "2021-10-21T18:04:46Z")

</div>

Hi everyone! Today I get an email saying “Action Required: Authorization Code and Access Token Variable Size” anybody know if this change the size of the OTP code? Thanks.

---

## [Passwordless via Email: Users don't receive the OTP](https://community.auth0.com/t/passwordless-via-email-users-dont-receive-the-otp/68680)

<div class="topic-metadata">

**Author:** [@alexis.becker](https://community.auth0.com/u/alexis.becker)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 8:45pm UTC](https://community.auth0.com/t/passwordless-via-email-users-dont-receive-the-otp/68680 "2021-08-30T20:45:21Z")

</div>

Hi all, We noticed an issue with the Passwordless log-in set-up we’re currently using for our app. With this option, our users are supposed to be able to sign up using a one-time password authentication which they rece…

---

## [OTP Random generation](https://community.auth0.com/t/otp-random-generation/53096)

<div class="topic-metadata">

**Author:** [@paul.a.stonehewer](https://community.auth0.com/u/paul.a.stonehewer)\
**Replies:** 5\
**Last updated:** [November 24, 2020, 1:44pm UTC](https://community.auth0.com/t/otp-random-generation/53096 "2020-11-24T13:44:21Z")

</div>

During testing of an application where are customers need to use MFA via SMS we have noticed that the SMS generated by auth0 and sent to our Twilio vendor has had the same SMS OTP number for the last 3 requests. Each req…

---

## [Can we use multiple OPT to verify user](https://community.auth0.com/t/can-we-use-multiple-opt-to-verify-user/42536)

<div class="topic-metadata">

**Author:** [@lomesh.trivedi](https://community.auth0.com/u/lomesh.trivedi)\
**Replies:** 1\
**Last updated:** [May 8, 2020, 10:17pm UTC](https://community.auth0.com/t/can-we-use-multiple-opt-to-verify-user/42536 "2020-05-08T22:17:46Z")

</div>

Hi All, we have register via OTP flow implemented. But we observe at time customer requests for two OTP and then when they get two emails with otp. Accidentally they use first OTP which is already invalid as auth0 only a…

---

## [Issue re-enrol user after reset MFA](https://community.auth0.com/t/issue-re-enrol-user-after-reset-mfa/39694)

<div class="topic-metadata">

**Author:** [@santo](https://community.auth0.com/u/santo)\
**Replies:** 5\
**Last updated:** [April 8, 2020, 1:40pm UTC](https://community.auth0.com/t/issue-re-enrol-user-after-reset-mfa/39694 "2020-04-08T13:40:32Z")

</div>

Hi, I’m getting issue when trying to re-enrol user MFA after resetting his/her MFA. It works when re-enrolling the user into authenticator OTP but it keeps on throwing the following error message when I tried with SMS …

---

## [Identify OTP from new unrecognise device](https://community.auth0.com/t/identify-otp-from-new-unrecognise-device/35355)

<div class="topic-metadata">

**Author:** [@santo](https://community.auth0.com/u/santo)\
**Replies:** 2\
**Last updated:** [January 8, 2020, 3:23am UTC](https://community.auth0.com/t/identify-otp-from-new-unrecognise-device/35355 "2020-01-08T03:23:08Z")

</div>

Hi, I’m looking for a way to identify user performing OTP from a new or unknown device. Currently, my way of implementation is looking at the auth0 log for type gd\_auth\_succeed where device id is new but somehow when r…

---

## [Error: \*MFA Error: The user does not support the requested challenge type (OTP). Supported type: oob.\*](https://community.auth0.com/t/error-mfa-error-the-user-does-not-support-the-requested-challenge-type-otp-supported-type-oob/9579)

<div class="topic-metadata">

**Author:** [@luke](https://community.auth0.com/u/luke)\
**Replies:** 1\
**Last updated:** [December 17, 2018, 3:47pm UTC](https://community.auth0.com/t/error-mfa-error-the-user-does-not-support-the-requested-challenge-type-otp-supported-type-oob/9579 "2018-12-17T15:47:06Z")

</div>

I am trying to have an alternate MFA with guardian if SMS isn’t working for the user. I would like to use OTP by email if the user can’t validate with the oob code sent by SMS. However, when I submit the OTP code sent b…
