Communications
An OTP is a one-time code, valid for a short window, sent to confirm that the person currently holds a phone number or an inbox. It is a confirmation step, not an identity system by itself. Novatelia scopes OTP delivery on the SMS solution, using the provider the customer contracts. No delivery percentage and no price per message are published.
Revised 2026-10-10. Published by Novatelia. No individual author is named, because no personal credential is claimed for this explanation.
Key points
- The code expires and is used once.
- The directory still has to know who the person is.
- SMS is not the only channel, and it is not automatically the right one.
Definition
A one-time password proves control of a destination at that moment. It does not replace a directory, a device policy, or a vault for administrator accounts.
How it works
The application generates a code, stores a hash and an expiry, and asks the contracted provider to deliver it. The person submits the code. The application checks the hash and refuses it after success or expiry. The provider’s receipt is not the same as the person having read it.
Architecture
- The application that owns the sign-in step.
- A provider contract for SMS or another channel.
- Expiry, attempt limits, and a path when the message does not arrive.
Use cases
- A sign-in step wants a second factor by SMS.
- A transaction confirmation needs a code to a registered number.
- The organization would rather use an authenticator app, which is an identity decision, not an SMS project.
Selection guidance
- Decide the channel after the risk, not before.
- Keep the identity design on the identity-security solution when the question is the directory.
- Do not publish a delivery SLA. This site does not.
Questions
Is SMS OTP the same as WhatsApp?
No. SMS uses a mobile operator path through the customer’s provider. WhatsApp uses the Business Platform. The SMS and WhatsApp solutions stay separate so the contracts are not mixed.
Does Novatelia operate the SMS network?
No. Delivery uses the provider the customer contracts. Novatelia scopes the application integration. No carrier license is claimed.
Related
More in Communications
This page defines a term so a project can be scoped. It is not a certification, a test result, or a price. Partnerships are stated only on the partners page. The published address and telephone are the company contact, not a service-level commitment.
Describe the requirement
An RFQ saves a browser draft. It does not publish a price or issue a quotation reference.