Documentation

Everything you need to integrate secure, embedded OTP authentication into your website or application.

What is eOTP?

eOTP is a lightweight, embeddable one-time password solution that lets you add strong authentication to any website, form, or document with just a few lines of code. No backend infrastructure required.

Deliver OTPs via SMS, WhatsApp, Email, or Voice Call, and receive a secure verification token upon success.

Generating an AppCode

The appCode is your unique identifier that connects your application to the eOTP service.

  1. Log in to your eOTP Dashboard
  2. Navigate to the AppCodes section
  3. Click Create New AppCode
  4. Give it a name and whitelist your domain (e.g. https://yourdomain.com)
  5. Select your default and backup delivery methods
  6. Copy the generated AppCode and store it securely
Note: Each AppCode is bound to the whitelisted domain(s) for security.

Integrating eOTP

Follow these steps to add OTP verification to your site.

Step 1: Include the Script

<script src="https://api.e-otp.com/eotp.js"></script>

Step 2: Add a Container

<div id="eotp-container"></div>

Step 3: Initialize & Start Verification

<script>
EmbedOTP.init({
    appCode: "your-app-code-here",
    container: "#eotp-container",
    msisdn: "+27821234567",
    email: "user@example.com",
    onSuccess: function(token) {
        console.log("Verification successful. Token:", token);
        // Send token to your backend for validation
    }
}).then(() => {
    EmbedOTP.startVerification("#eotp-container");
});
</script>
Important: Always validate the returned token on your server-side. Client-side validation is not secure.

eOTP Suite

eOTP goes beyond basic authentication. The full suite includes tools for secure document sharing, verified form collection, and digital signatures.

SecureShare

Share sensitive documents securely. Recipients must complete eOTP verification before they can view or download the file. Perfect for contracts, reports, and confidential information.

  • 2FA-protected access links
  • Expiry timers and one-time access
  • Full access audit trail

SecureForms

Drag-and-drop form builder that lets you create professional forms and share them through SecureShare. All submissions are tied to a verified identity.

  • Easy form creation
  • 2FA-protected sharing
  • Verified lead & data collection
  • AI-assisted form building — coming soon

SecureDoc

Upload, create, or generate documents that can be securely shared. Recipients must authenticate via eOTP before viewing or interacting with the document.

SecureSign

Collect legally binding digital signatures backed by eOTP verification. Ensure the person signing is who they claim to be.

  • Identity-verified signatures
  • Audit-ready records
  • Seamless integration with SecureShare
Note: SecureShare, SecureForms, SecureDoc, and SecureSign are currently in active development. Full API and integration documentation will be published as soon as they become available.