Business

OTP Login

Phone sign-in for a Beirut delivery app: Lebanese numbers in any format, a 6-digit code by SMS or WhatsApp with paste and one-tap autofill, a resend timer, attempt limits with a lockout, trusted devices, and authenticator two-step setup with a real, scannable QR code and backup codes. A developer panel shows every simulated message, the live authenticator codes and each security event.

Use the Live / Loading / Empty / Error switch at the top to see every state.

Why it matters

Customers sign in with the number they already use — no passwords to forget or reset — while lockouts, single-use codes, trusted devices and two-step verification keep accounts, payouts and saved addresses safe.

How it works

  1. 01Type a Lebanese mobile in any format (03, 70–81, +961, 00961); landlines and wrong prefixes are caught before a code is sent. The code arrives by SMS or WhatsApp and fills the six boxes from the notification, a paste or keyboard autofill.
  2. 02Every code expires, is replaced by a resend and is cancelled after too many wrong tries; countdowns control resends and lockouts, and the rules (cooldown, attempts, lockout length, expiry) can be adjusted.
  3. 03After sign-in, people turn on an authenticator app by scanning a real QR code (RFC 6238 TOTP), save single-use backup codes, trust this device for 30 days and review recent sign-ins.

See it inside a full build