OTP Authentication (Enable/Disable & Login Verification)

DXT360 Analytics provides an OTP (One-Time Password) authentication feature to enhance your account security. This feature adds a second verification step during login by sending a code to your registered email, ensuring that only authorized users can access the platform.

OTP can be controlled at the client (account) level through the Admin Panel, allowing different security configurations for each client. When enabled, all users under the same account must complete OTP verification during login, helping you secure access, maintain consistent authentication behavior, and reduce the risk of unauthorized access.

How OTP Works

Login Flow with OTP Enabled

1. Enter your email and password
2. You will be redirected to the OTP verification page
3. A 6-digit OTP code is sent to your registered email
4. Enter the code to complete login

Login Flow with OTP Disabled

If OTP is disabled for your account, you can log in directly using email and password. No additional verification is required.

Admin Control: Enable/Disable OTP

OTP can be managed through the Admin Panel.

Key Behavior:

• OTP setting applies to all users (User & Admin roles) under the same account
• Changes take effect on the next login session
• Default setting: OFF (OTP disabled unless activated)

Important:

• CX & Insight roles will always require OTP, regardless of client settings
• OTP configuration allows flexible security policies per client

Additional Features

Resend OTP

• Available after 2 minutes countdown
• Maximum 5 resend attempts
• After limit is reached → temporary restriction applies

Remember This Device

• Skip OTP for trusted devices
• Valid for up to 30 days
• OTP will be required again if:
  1. You use a different browser
  2. You clear cookies/cache
  3. The session expires

Change Email During Login

If you don’t receive the OTP:

• You can update your email address directly on the OTP page
• A new OTP will be sent to the updated email
• This option is only available before successful OTP verification

Error Handling & Security Limits

To protect your account:

• Maximum 5 incorrect OTP attempts
• After repeated failures:
  1. You will be logged out
  2. Login will be temporarily blocked for 30 minutes
  3. You can submit a support ticket via Zendesk
• Expired or invalid OTP will trigger an error message

OTP authentication in DXT360 gives you flexible, client-level security control while ensuring a safe and consistent login experience. Admins can enable or disable OTP based on client needs, while users benefit from enhanced protection with minimal friction.