One-time password
In cryptography and information security, a one-time password, or OTP, is a password used for a single authentication and then discarded. Because it is used only once, such a system provides what is called strong authentication and is resistant to replay attacks.
On this page
Source content checked . English translation published 2026-10-27.
In business automation
A one-time password authorizes one action and then becomes invalid. In automation, it is used for logging in, approving a payment, or performing a sensitive action so that a captured old password is not enough for an attacker.
Examples
These examples illustrate a possible workflow. Adapt the connections and rules to your own systems.
Approving a change to a supplier's bank account
A finance manager changes beneficiary details. The system sends a one-time code to the registered phone. The record is updated only after the code is entered. A code from an earlier attempt is rejected, even if someone copied it from an email.
Relevant tools
- Descope
- A login flow can be built with a one-time password; set a short expiration and prevent reuse of the same code.
What to check
- Sending the code through the same channel where the password has already been exposed weakens the protection.