# Standard 2FA

How to program classic two-factor authentication with high security for sensitive operations.

---

This system is ideal for financial transactions and admin panels. It ensures the user is physically present and performing the action themselves.

**Integration Steps:**
1. The user enters their regular Password, which is verified on your server.
2. Instead of sending an SMS, call the `/api/verify/init` endpoint to start a ReOTP session.
3. Show the ReOTP UI prompting the user to send the code via WhatsApp or Telegram.
4. Your front-end starts polling `/api/verify/stream`.
5. Once the server returns `VERIFIED`, the user is logged in or allowed to proceed with the sensitive transaction.