{"id":98431,"date":"2026-10-02T20:20:11","date_gmt":"2026-10-02T20:20:11","guid":{"rendered":"https:\/\/mailrelay.com\/glossary\/otp\/"},"modified":"2026-10-07T14:08:56","modified_gmt":"2026-10-07T14:08:56","slug":"otp","status":"publish","type":"glossary","link":"https:\/\/mailrelay.com\/en\/glossary\/otp\/","title":{"rendered":"OTP"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">An OTP (One-Time Password) is a password or code that is valid for only one login or transaction and expires within a few minutes. It usually has 6 digits and arrives by SMS, by email or in an app.<\/p>\n\n<p class=\"wp-block-paragraph\">You use it almost every day without thinking about it. When your bank asks you to confirm a payment, when you log in to an account from a different phone or when an online store verifies your email.<\/p>\n\n<p class=\"wp-block-paragraph\">For a business, sending that code properly is part of the user experience. If it takes too long or ends up in <a href=\"https:\/\/mailrelay.com\/en\/glossary\/spam\/\" target=\"_blank\" rel=\"noopener\">spam<\/a>, the customer gives up.<\/p>\n\n<h2 class=\"wp-block-heading\">What does OTP mean and what is it used for?<\/h2>\n\n<p class=\"wp-block-paragraph\">OTP stands for <em>one-time password<\/em>: a password that can only be used once. It is also called a verification code or a one-time code.<\/p>\n\n<p class=\"wp-block-paragraph\">It is used to check that whoever is trying to log in or pay really is the account holder. Your regular password may have been leaked; the temporary code can&#8217;t be, because it changes with every attempt.<\/p>\n\n<p class=\"wp-block-paragraph\">These are its most common uses:<\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Logging in<\/strong> from a new device or as a second step.<\/li>\n\n\n\n<li><strong>Confirming payments<\/strong> in <a href=\"https:\/\/mailrelay.com\/en\/glossary\/ecommerce\/\" target=\"_blank\" rel=\"noopener\">ecommerce<\/a> stores and banks.<\/li>\n\n\n\n<li><strong>Verifying sign-ups<\/strong>: checking that the email address or phone number belongs to the user, similar to the <a href=\"https:\/\/mailrelay.com\/en\/glossary\/double-opt-in\/\" target=\"_blank\" rel=\"noopener\">double opt-in<\/a> of a <a href=\"https:\/\/mailrelay.com\/en\/glossary\/subscription-form\/\" target=\"_blank\" rel=\"noopener\">subscription form<\/a>.<\/li>\n\n\n\n<li><strong>Password recovery<\/strong> without links that could be reused.<\/li>\n\n\n\n<li><strong>Sensitive operations<\/strong>, such as changing the account email or bank details.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">How does an OTP code work?<\/h2>\n\n<p class=\"wp-block-paragraph\">The process has four steps. The server generates a random number and stores it linked to your account with an expiration time.<\/p>\n\n<p class=\"wp-block-paragraph\">It then sends it to you through the chosen channel. You enter it on the website or in the app, and the server checks that it matches and hasn&#8217;t expired.<\/p>\n\n<p class=\"wp-block-paragraph\">If everything is correct, the code is invalidated. Even if someone sees it later, it&#8217;s no longer any use.<\/p>\n\n<p class=\"wp-block-paragraph\">NIST, the US standards body, recommends in its SP 800-63B guidelines that the code have at least 6 digits.<\/p>\n\n<p class=\"wp-block-paragraph\">It also requires the code to expire after 10 minutes and failed attempts to be limited.<\/p>\n\n<h2 class=\"wp-block-heading\">Types of OTP<\/h2>\n\n<p class=\"wp-block-paragraph\">Not all codes are generated or delivered the same way. These are the most common formats:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Type<\/th><th>How it is generated or delivered<\/th><th>Advantage<\/th><th>Weak point<\/th><\/tr><\/thead><tbody><tr><td>SMS OTP<\/td><td>The server sends it to the phone number<\/td><td>Reaches any mobile phone, no apps needed<\/td><td>Exposed to SIM swapping<\/td><\/tr><tr><td>Email OTP<\/td><td>It is sent to the user&#8217;s email address<\/td><td>No per-message cost and easy to integrate<\/td><td>If the email account is stolen, so is the code<\/td><\/tr><tr><td>TOTP (authenticator app)<\/td><td>The app calculates a new code every 30 seconds<\/td><td>Works without mobile coverage<\/td><td>The app has to be installed and set up<\/td><\/tr><tr><td>HOTP<\/td><td>Generated from a counter on each use<\/td><td>Works with hardware keys and tokens<\/td><td>Less common in consumer services<\/td><\/tr><tr><td>Push notification<\/td><td>The app asks you to approve access with a tap<\/td><td>Very convenient<\/td><td>Risk of approving out of fatigue<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">TOTP and HOTP are open IETF standards: RFC 6238 and RFC 4226. That&#8217;s why authenticator apps work with almost any service.<\/p>\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-1024x576.png\" alt=\"How an OTP code works in 4 steps: the code is generated, sent by SMS or email, the user enters it, and it is validated and expires; 6 digits and a 10-minute expiry\" class=\"wp-image-97991\" srcset=\"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-1024x576.png 1024w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-300x169.png 300w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-768x432.png 768w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-1536x864.png 1536w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-110x62.png 110w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-60x34.png 60w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona.png 1672w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n<h2 class=\"wp-block-heading\">OTP and 2FA: what&#8217;s the difference?<\/h2>\n\n<p class=\"wp-block-paragraph\">2FA (two-step or two-factor authentication) is the method. The OTP is one of the tools that make it possible.<\/p>\n\n<p class=\"wp-block-paragraph\">2FA combines two different factors: something you know, such as your password, and something you have, such as your phone. The temporary code proves that second factor.<\/p>\n\n<p class=\"wp-block-paragraph\">The impact is huge. According to Microsoft (2019), enabling multi-factor authentication blocks more than 99.9% of account attacks.<\/p>\n\n<p class=\"wp-block-paragraph\">In Europe, the PSD2 payments directive also requires strong authentication for many online payments. That&#8217;s why your bank sends you a code before confirming a purchase.<\/p>\n\n<div class=\"wp-block-group has-very-light-gray-background-color has-background\" style=\"border-radius:8px;padding-top:24px;padding-right:28px;padding-bottom:24px;padding-left:28px\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Your codes, in the inbox<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With Mailrelay you send transactional emails via SMTP or API, with delivery statistics, and SMS from the same account.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-mailrelay-primary-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/mailrelay.com\/en\/signup\/?utm_medium=cta&amp;utm_campaign=otp\">Create a free account<\/a><\/div>\n<\/div>\n<\/div><\/div>\n\n<h2 class=\"wp-block-heading\">Is SMS OTP secure?<\/h2>\n\n<p class=\"wp-block-paragraph\">It is much more secure than a password alone, but it has weak points. NIST considers it a &#8220;restricted&#8221; method because of the risk of SIM swapping, in which an attacker gets a copy of your SIM card.<\/p>\n\n<p class=\"wp-block-paragraph\">The other big risk is <a href=\"https:\/\/mailrelay.com\/en\/glossary\/phishing\/\" target=\"_blank\" rel=\"noopener\">phishing<\/a>. A fake message asks you for the code and uses it immediately.<\/p>\n\n<p class=\"wp-block-paragraph\">That&#8217;s why good messages always include a warning: &#8220;Don&#8217;t share this code with anyone&#8221;. Neither your bank nor any other company will ever ask you for it over the phone.<\/p>\n\n<p class=\"wp-block-paragraph\">Even so, SMS is still the most universal option. It doesn&#8217;t need apps or mobile data, as we explain in the entry on <a href=\"https:\/\/mailrelay.com\/en\/glossary\/sms\/\" target=\"_blank\" rel=\"noopener\">SMS<\/a>.<\/p>\n\n<h2 class=\"wp-block-heading\">SMS or email OTP?<\/h2>\n\n<p class=\"wp-block-paragraph\">It depends on your audience and the situation. The usual approach is to combine both channels.<\/p>\n\n<p class=\"wp-block-paragraph\">SMS is better for payments and urgent logins, because it is read within seconds. Email works well for verifying sign-ups, confirming account changes or as a fallback if the SMS doesn&#8217;t arrive. And if your customers use WhatsApp, the <a href=\"https:\/\/mailrelay.com\/en\/glossary\/whatsapp-business-api\/\">WhatsApp Business API<\/a> lets you send the code in an authentication template.<\/p>\n\n<p class=\"wp-block-paragraph\">In both cases, speed is what matters. A code that takes two minutes leads to retries, complaints and sign-up drop-offs.<\/p>\n\n<p class=\"wp-block-paragraph\">If you choose email, take care of your <a href=\"https:\/\/mailrelay.com\/en\/glossary\/deliverability-in-email-marketing\/\" target=\"_blank\" rel=\"noopener\">deliverability<\/a>. Authenticate your <a href=\"https:\/\/mailrelay.com\/en\/glossary\/sending-domain\/\" target=\"_blank\" rel=\"noopener\">sending domain<\/a> with <a href=\"https:\/\/mailrelay.com\/en\/glossary\/spf-sender-policy-framework\/\" target=\"_blank\" rel=\"noopener\">SPF<\/a>, <a href=\"https:\/\/mailrelay.com\/en\/glossary\/dkim-domainkeys-identified-mail\/\" target=\"_blank\" rel=\"noopener\">DKIM<\/a> and <a href=\"https:\/\/mailrelay.com\/en\/glossary\/dmarc\/\" target=\"_blank\" rel=\"noopener\">DMARC<\/a>, or the code won&#8217;t reach the <a href=\"https:\/\/mailrelay.com\/en\/glossary\/inbox\/\" target=\"_blank\" rel=\"noopener\">inbox<\/a>.<\/p>\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-1024x576.png\" alt=\"OTP code by SMS or by email: SMS is read within seconds and is ideal for payments; email has no per-message cost and is ideal for sign-ups\" class=\"wp-image-97994\" srcset=\"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-1024x576.png 1024w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-300x169.png 300w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-768x432.png 768w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-1536x864.png 1536w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-110x62.png 110w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email-60x34.png 60w, https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-sms-vs-email.png 1672w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n<h2 class=\"wp-block-heading\">Best practices for sending OTP codes<\/h2>\n\n<p class=\"wp-block-paragraph\">Put the code in the <a href=\"https:\/\/mailrelay.com\/en\/glossary\/email-subject-line\/\" target=\"_blank\" rel=\"noopener\">email subject line<\/a> or at the start of the SMS. That way it can be seen in the notification without opening the message.<\/p>\n\n<p class=\"wp-block-paragraph\">Say how long it is valid. &#8220;Expires in 10 minutes&#8221; avoids confusion and retries.<\/p>\n\n<p class=\"wp-block-paragraph\">Always use the same recognizable <a href=\"https:\/\/mailrelay.com\/en\/glossary\/sender\/\" target=\"_blank\" rel=\"noopener\">sender<\/a>. An unfamiliar name looks too much like a <a href=\"https:\/\/mailrelay.com\/en\/glossary\/spoofing\/\" target=\"_blank\" rel=\"noopener\">spoofing<\/a> attempt.<\/p>\n\n<p class=\"wp-block-paragraph\">Don&#8217;t mix the code with advertising. It&#8217;s a <a href=\"https:\/\/mailrelay.com\/en\/glossary\/transactional-email\/\" target=\"_blank\" rel=\"noopener\">transactional email<\/a>, not a <a href=\"https:\/\/mailrelay.com\/en\/glossary\/newsletter\/\" target=\"_blank\" rel=\"noopener\">newsletter<\/a>, and it should be short and clean.<\/p>\n\n<p class=\"wp-block-paragraph\">Send it from a service separate from your bulk campaigns, with its own <a href=\"https:\/\/mailrelay.com\/en\/glossary\/domain-reputation\/\" target=\"_blank\" rel=\"noopener\">domain reputation<\/a>. That way a spike in marketing sends won&#8217;t delay the codes.<\/p>\n\n<p class=\"wp-block-paragraph\">And limit resends. An unlimited &#8220;send again&#8221; button is an open door to <a href=\"https:\/\/mailrelay.com\/en\/glossary\/bots\/\" target=\"_blank\" rel=\"noopener\">bots<\/a> and skyrocketing SMS bills.<\/p>\n\n<h2 class=\"wp-block-heading\">How Mailrelay helps you send OTP codes<\/h2>\n\n<p class=\"wp-block-paragraph\">Mailrelay doesn&#8217;t generate the codes: your website or app does that. What it does is deliver them quickly and track every send, by email or by SMS.<\/p>\n\n<p class=\"wp-block-paragraph\">For email, you have <a href=\"https:\/\/mailrelay.com\/en\/glossary\/smtp\/\" target=\"_blank\" rel=\"noopener\">SMTP<\/a> and the <a href=\"https:\/\/mailrelay.com\/en\/glossary\/api\/\" target=\"_blank\" rel=\"noopener\">API<\/a>. Your application sends each code as a transactional email, with statistics on delivery, bounces, opens and clicks.<\/p>\n\n<p class=\"wp-block-paragraph\">You can tag these sends with SMTP tags to separate them from your campaigns in the reports.<\/p>\n\n<p class=\"wp-block-paragraph\">We explain it in the post about <a href=\"https:\/\/mailrelay.com\/en\/blog\/2026\/01\/27\/professional-smtp-and-api-for-transactional-emails-with-statistics\/\" target=\"_blank\" rel=\"noopener\">SMTP and API for transactional emails<\/a>.<\/p>\n\n<p class=\"wp-block-paragraph\">For SMS, the API includes a function to send transactional SMS to one or more recipients.<\/p>\n\n<p class=\"wp-block-paragraph\">You set the sender name and the text, and you can then check the status of each message. Rates are on the <a href=\"https:\/\/mailrelay.com\/en\/pricing\/sms\/\" target=\"_blank\" rel=\"noopener\">SMS pricing<\/a> page.<\/p>\n\n<p class=\"wp-block-paragraph\">With the free account you can try SMTP and the API for 30 days. After that, they are included in the Standard and Enterprise plans, or can be added to the free account.<\/p>\n\n<p class=\"wp-block-paragraph\">And your campaigns stay in the same account: up to 80,000 emails a month and 20,000 contacts for free, with chat, ticket and phone support.<\/p>\n\n<div class=\"wp-block-group has-very-light-gray-background-color has-background\" style=\"border-radius:8px;padding-top:24px;padding-right:28px;padding-bottom:24px;padding-left:28px\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Email, SMS and campaigns in one place<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Try SMTP and the API for 30 days with the free account, with up to 80,000 emails a month and chat, ticket and phone support.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-mailrelay-primary-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/mailrelay.com\/en\/signup\/?utm_medium=cta&amp;utm_campaign=otp\">Try Mailrelay for free<\/a><\/div>\n<\/div>\n<\/div><\/div>\n\n<h2 class=\"wp-block-heading\">Frequently asked questions about OTP<\/h2>\n\n<p class=\"wp-block-paragraph\"><strong>What is an OTP code?<\/strong>  It is a temporary password that is valid for only one login or transaction. It usually has 6 digits and expires within a few minutes.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>What does OTP mean?<\/strong> It stands for <em>one-time password<\/em>, a password that can only be used once.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Where do I receive the OTP code?<\/strong>  Usually by SMS or email, although many services use authenticator apps or push notifications.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Why isn&#8217;t my OTP code arriving?<\/strong>  Check your spam folder and your phone&#8217;s signal. If it still doesn&#8217;t arrive, request a new one after a few seconds: many services limit resends.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Is OTP the same as 2FA?<\/strong> No. 2FA is the two-step verification method, and the OTP is one of the codes used in that second step.<\/p>\n\n<h2 class=\"wp-block-heading\">Related terms<\/h2>\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/mailrelay.com\/en\/glossary\/transactional-email\/\">Transactional email<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/mailrelay.com\/en\/glossary\/smtp\/\">SMTP<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/mailrelay.com\/en\/glossary\/sms\/\">SMS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/mailrelay.com\/en\/glossary\/phishing\/\">Phishing<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/mailrelay.com\/en\/glossary\/spoofing\/\">Spoofing<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/mailrelay.com\/en\/glossary\/double-opt-in\/\">Double opt-in<\/a><\/li>\n<\/ul>\n","protected":false},"template":"","class_list":["post-98431","glossary","type-glossary","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>OTP: what it is, how it works and how to send the code<\/title>\n<meta name=\"description\" content=\"What an OTP or one-time code is, how it works, the types, how it relates to 2FA and how to send it by SMS or email quickly and securely.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mailrelay.com\/en\/glossary\/otp\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OTP: what it is, how it works and how to send the code\" \/>\n<meta property=\"og:description\" content=\"What an OTP or one-time code is, how it works, the types, how it relates to 2FA and how to send it by SMS or email quickly and securely.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mailrelay.com\/en\/glossary\/otp\/\" \/>\n<meta property=\"og:site_name\" content=\"Mailrelay\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Mailrelay\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-07T14:08:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1672\" \/>\n\t<meta property=\"og:image:height\" content=\"941\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@mailrelay\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/\",\"url\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/\",\"name\":\"OTP: what it is, how it works and how to send the code\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mailrelay.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/otp-como-funciona-1024x576.png\",\"datePublished\":\"2026-10-02T20:20:11+00:00\",\"dateModified\":\"2026-10-07T14:08:56+00:00\",\"description\":\"What an OTP or one-time code is, how it works, the types, how it relates to 2FA and how to send it by SMS or email quickly and securely.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/#primaryimage\",\"url\":\"https:\\\/\\\/mailrelay.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/otp-como-funciona-1024x576.png\",\"contentUrl\":\"https:\\\/\\\/mailrelay.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/otp-como-funciona-1024x576.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/glossary\\\/otp\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OTP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/\",\"name\":\"Mailrelay\",\"description\":\"Mailrelay.com - Email Marketing Software\",\"publisher\":{\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/#organization\",\"name\":\"Mailrelay\",\"url\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mailrelay.com\\\/wp-content\\\/uploads\\\/2019\\\/05\\\/mailrelay-logo.jpg\",\"contentUrl\":\"https:\\\/\\\/mailrelay.com\\\/wp-content\\\/uploads\\\/2019\\\/05\\\/mailrelay-logo.jpg\",\"width\":613,\"height\":291,\"caption\":\"Mailrelay\"},\"image\":{\"@id\":\"https:\\\/\\\/mailrelay.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Mailrelay\\\/\",\"https:\\\/\\\/x.com\\\/mailrelay\",\"https:\\\/\\\/www.youtube.com\\\/mailrelay-email-marketing\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OTP: what it is, how it works and how to send the code","description":"What an OTP or one-time code is, how it works, the types, how it relates to 2FA and how to send it by SMS or email quickly and securely.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mailrelay.com\/en\/glossary\/otp\/","og_locale":"en_US","og_type":"article","og_title":"OTP: what it is, how it works and how to send the code","og_description":"What an OTP or one-time code is, how it works, the types, how it relates to 2FA and how to send it by SMS or email quickly and securely.","og_url":"https:\/\/mailrelay.com\/en\/glossary\/otp\/","og_site_name":"Mailrelay","article_publisher":"https:\/\/www.facebook.com\/Mailrelay\/","article_modified_time":"2026-10-07T14:08:56+00:00","og_image":[{"width":1672,"height":941,"url":"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@mailrelay","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/mailrelay.com\/en\/glossary\/otp\/","url":"https:\/\/mailrelay.com\/en\/glossary\/otp\/","name":"OTP: what it is, how it works and how to send the code","isPartOf":{"@id":"https:\/\/mailrelay.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/mailrelay.com\/en\/glossary\/otp\/#primaryimage"},"image":{"@id":"https:\/\/mailrelay.com\/en\/glossary\/otp\/#primaryimage"},"thumbnailUrl":"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-1024x576.png","datePublished":"2026-10-02T20:20:11+00:00","dateModified":"2026-10-07T14:08:56+00:00","description":"What an OTP or one-time code is, how it works, the types, how it relates to 2FA and how to send it by SMS or email quickly and securely.","breadcrumb":{"@id":"https:\/\/mailrelay.com\/en\/glossary\/otp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mailrelay.com\/en\/glossary\/otp\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mailrelay.com\/en\/glossary\/otp\/#primaryimage","url":"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-1024x576.png","contentUrl":"https:\/\/mailrelay.com\/wp-content\/uploads\/2026\/10\/otp-como-funciona-1024x576.png"},{"@type":"BreadcrumbList","@id":"https:\/\/mailrelay.com\/en\/glossary\/otp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mailrelay.com\/en\/"},{"@type":"ListItem","position":2,"name":"OTP"}]},{"@type":"WebSite","@id":"https:\/\/mailrelay.com\/en\/#website","url":"https:\/\/mailrelay.com\/en\/","name":"Mailrelay","description":"Mailrelay.com - Email Marketing Software","publisher":{"@id":"https:\/\/mailrelay.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mailrelay.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mailrelay.com\/en\/#organization","name":"Mailrelay","url":"https:\/\/mailrelay.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mailrelay.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mailrelay.com\/wp-content\/uploads\/2019\/05\/mailrelay-logo.jpg","contentUrl":"https:\/\/mailrelay.com\/wp-content\/uploads\/2019\/05\/mailrelay-logo.jpg","width":613,"height":291,"caption":"Mailrelay"},"image":{"@id":"https:\/\/mailrelay.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Mailrelay\/","https:\/\/x.com\/mailrelay","https:\/\/www.youtube.com\/mailrelay-email-marketing"]}]}},"uagb_featured_image_src":[],"uagb_author_info":{"display_name":"Jose Argudo","author_link":"https:\/\/mailrelay.com\/en\/blog\/author\/"},"uagb_comment_info":0,"uagb_excerpt":"An OTP (One-Time Password) is a password or code that is valid for only one login or transaction and expires within a few minutes. It usually has 6 digits and arrives by SMS, by email or in an app. You use it almost every day without thinking about it. When your bank asks you to&hellip;","_links":{"self":[{"href":"https:\/\/mailrelay.com\/en\/wp-json\/wp\/v2\/glossary\/98431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mailrelay.com\/en\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/mailrelay.com\/en\/wp-json\/wp\/v2\/types\/glossary"}],"version-history":[{"count":2,"href":"https:\/\/mailrelay.com\/en\/wp-json\/wp\/v2\/glossary\/98431\/revisions"}],"predecessor-version":[{"id":100225,"href":"https:\/\/mailrelay.com\/en\/wp-json\/wp\/v2\/glossary\/98431\/revisions\/100225"}],"wp:attachment":[{"href":"https:\/\/mailrelay.com\/en\/wp-json\/wp\/v2\/media?parent=98431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}