One-Time Passwords (OTPs) are temporary codes for single use that can be delivered to users via email. OTPs expire after 5 minutes and can only be used once. OTPs can provide a more secure and convenient alternative to regular passwords.

To use One-Time Passwords, they need to be enabled in the configuration:

[auth.method.otp.email]
enabled = true

After the functionality has been enabled the flow is as follows:

  1. User requests an OTP:
nhost.auth.signInEmailOTP('user@example.com')
  1. User receives an email with the OTP
  2. User enters the OTP
nhost.auth.verifyEmailOTP('user@example.com', '123456')
Email and PasswordMagic Links