Standard 2FA After Password

Overview

User enters password first, then confirms identity via WhatsApp/Telegram. Ideal for banks and admin panels.

Implementation

1. After server-side password success: call POST /api/verify/init with phoneNumber and method.

2. Show embedded ReOTP screen with countdown.

3. Poll status every 2s until VERIFIED.

4. On success: grant access to /dashboard.

UI/UX Guidelines

• Clearly show the two steps (Step 1: Password, Step 2: ReOTP).

• Use blue + emerald accents.

• Show QR or copyable link.