OTP Over Email

The OTP Over Email authentication method enhances security using Time-based One-Time Passwords (TOTP). This method involves sending a one-time passcode to the user’s registered email address, which they must enter to log into the application.

How OTP Over Email Works

• OTP Generation and Delivery:

  • Requesting an OTP: When a user attempts to log in, an OTP is generated and sent to their registered email address.

  • Entering the OTP: The user retrieves the OTP from their email and enters it into the application within the validity period to authenticate.

• Time-Based Validity:

  • Passcode Duration: The OTP is valid only for a specific time window, typically between 30 and 60 seconds. After expiration, the OTP cannot be used, and a new one must be requested.

Configuration Requirements

• Outgoing Mail Server: To use OTP Over Email, configure the outgoing mail server on your Atlassian instance. Ensure that email settings such as SMTP server address, port, and authentication details are correctly set up to enable successful OTP delivery.

Security Considerations

• Email Account Security: To enhance security, users should ensure their email account is protected with a strong password and, ideally, a separate 2FA method.

• Spam Filters: Check that OTP emails are not being mistakenly filtered into spam or junk folders.

For detailed instructions on configuring the outgoing mail server, please refer to the 2FA setup guide.