One-Time Verification Codes via API

What is Octotp?

Octotp is a SaaS for one-time codes delivered via API. Companies can generate tokens for their customers and validate them securely. Use it for email verification, two-factor authentication, password reset flows, or any scenario where you need to verify a user with a short-lived code.

How it works

1. Create a project in the Octotp dashboard and get your API key.
2. Call the API to create a token: send the recipient's email or phone, and receive a 6-digit code.
3. Deliver the code to your user (email, SMS, or in-app).
4. When the user enters the code, call the validate endpoint to verify it.
5. Tokens expire after 5 minutes and can be used only once.

Benefits

• Simple REST API – Create and validate tokens with two endpoints.
• Email and SMS – Support both channels with the same API.
• Rate limiting – Built-in per-project limits to protect your usage.
• Free tier – Start with a generous free plan.
• Secure – Codes are hashed; only the plain code is returned once at creation.

Frequently asked questions

What is Octotp?

Octotp is an API service that generates and validates one-time verification codes. You use it when you need to verify a user's email or phone number with a short code (e.g. 123456).

How do I integrate Octotp?

Sign up, create a project, and get an API key. Call POST /api/tokens to create a code and POST /api/tokens/validate to verify it. See our API integration guide for details.

Is there a free plan?

Yes. The free tier includes a generous rate limit so you can build and test without a credit card. Check pricing for limits.

How long do codes last?

Codes expire after 5 minutes by default. You can override this with the expiresInSeconds parameter when creating a token.

Get started

Create an account, add a project, and start sending verification codes in minutes. No credit card required for the free tier.