# Standard 2FA After Password

Maximum security for sensitive operations with ReOTP

---

## Overview
User enters password first, then confirms identity via WhatsApp/Telegram. Ideal for banks and admin panels.

### Implementation
1. After server-side password success: call POST /api/verify/init with phoneNumber and method.
2. Show embedded ReOTP screen with countdown.
3. Listen to (SSE) status instantly until VERIFIED.
4. On success: grant access to /dashboard.

### UI/UX Guidelines
- Clearly show the two steps (Step 1: Password, Step 2: ReOTP).
- Use blue + emerald accents.
- Show QR or copyable link.

## Interactive Demo

Demo type: example
Example ID: usecase-2
Title: Interactive Live Preview

See the live demo at: https://reotp.com/de/docs/usecase-2-standard-2fa-login