v1.2.38Web App
•1 min read

Email Verification & Password Reset with 6-Digit OTPs

AuthenticationSecurityWeb App

Added secure, full-stack email verification and password reset workflows using cryptographically secure 6-digit OTP codes, SHA-256 hashed storage, rate-limiting, and branded transactional email templates.

#Email Verification & Password Reset with 6-Digit OTPs

This release introduces comprehensive email verification and self-serve password reset capabilities powered by one-time password (OTP) codes:

  • Email Verification Flow: Automatically sends a 6-digit verification code when new accounts are created, complete with an interactive verification page, resend countdown timer, and in-settings verification modal.
  • Forgot Password Workflow: Seamless self-serve password recovery via 6-digit OTP sent to registered email addresses, allowing secure password updates without account lockout.
  • Security & Rate Limiting: OTP codes are stored as SHA-256 hashes at rest with 10-minute expirations, a 60-second resend cooldown to prevent spamming, and an automated lockout after 5 incorrect attempts.
  • Email Delivery System: Built-in transactional email service supporting SMTP transport configurations as well as local development simulation mode with formatted console logs.
  • Settings Integration: Live verification status badges (Verified / Unverified) in General Settings with one-click verification modals.