What is OTP (One-Time Password)?
A short numeric code sent via SMS, WhatsApp, or email that the signer enters to authenticate before signing.
A One-Time Password (OTP) is a 4-8 digit code sent to a signer through a separate channel (SMS, WhatsApp, email) that they must enter on the signing page to proceed. OTP authentication is a low-friction way to bind a signature to a verified communication channel: if the signer received the code at the email/phone the contract was sent to, they likely are who the contract names. PDF Verified supports OTP via email and WhatsApp for any document with the "Require OTP" flag enabled.
OTP vs KYC
OTP proves the signer controls the email/phone in the contract. KYC proves the signer is the named individual with a verified government ID. Use OTP for everyday contracts where channel-binding is sufficient; layer KYC on top for regulated or high-value transactions.
How PDF Verified generates and sends OTPs
When the signer clicks the sign link, PDF Verified generates a 6-digit code, hashes it, stores the hash, and sends the plaintext via Resend (email) or WhatsApp Business API. The code expires in 10 minutes. The signer enters it on the portal; PDF Verified hashes and compares. The plaintext is never stored.
OTP failure modes
SMS delivery can fail in low-coverage areas. WhatsApp requires the signer's phone to be active on the network. Email OTP is the most reliable globally. PDF Verified falls back to email when WhatsApp delivery fails for resilience.