SMS for two-factor authentication
Want to keep your accounts secure?
SMS two-factor authentication (2FA) adds a second layer of security your customers already know how to use: no token or app to carry, they just open a text and enter the code. Send one-time passcodes and login alerts through the touchSMS API, or talk to us about wiring 2FA into your existing sign-in flow.
What it looks like for two-factor authentication
Real, plain-text messages your customers and team read in seconds. Personalise every send, collect replies, and let people respond right on the same number.
How teams in two-factor authentication use touchSMS
Developers use the touchSMS REST API to send one-time passcodes and verification codes for two-factor authentication (2FA), securing logins, sign-ups and sensitive transactions. A single API call delivers an OTP to the user's phone in seconds, adding a second security factor your customers already know how to use with no app or token to carry.
One-time passcodes
Generate a six-digit OTP in your app and send it with a single REST API call. The user enters the code to complete login, giving you a second security factor without any hardware token or authenticator app.
Phone number verification
Confirm a new customer owns the number they entered at sign-up by texting a verification code they type back in. It stops fake or mistyped numbers and keeps your user records accurate from day one.
Transaction authorisation
Send a verification code before a payment, transfer or account change so the user can authorise a sensitive action. The code confirms the request came from the account holder and not from a hijacked session.
Login and security alerts
Text an alert when a login happens from a new device or location, with a number to call if it was not them. It gives users early warning of suspicious access alongside your OTP flow.
Everything you need to send
Virtual numbers
Send from a dedicated mobile number and let people text you back on the same one. Your virtual number becomes the identity recipients recognise instantly.
API integrations
Simple REST APIs let your software send and receive SMS through ours. Have a developer? They'll wire it up fast. Don't? We'll custom-build the integration for you.
Email to SMS
Send an SMS as easily as you send an email: the familiarity of your email client with the reach and speed of text.
SMS for two-factor authentication, answered
How do I send one-time passcodes with touchSMS?
Post the recipient number and your generated code to the REST API and touchSMS delivers the OTP as an SMS. There is no SDK to install: any language that can make an HTTPS request can send a passcode.
Is OTP delivery fast and reliable enough for login flows?
Yes. Codes are sent for fast, reliable delivery so users receive them within seconds of a sign-in attempt. Each SMS is 5c with no contracts or monthly fees, and prepaid credits never expire.
Do I need a dedicated number to send verification codes?
No. You can send OTPs without one, though a dedicated virtual number is optional if you want a consistent sender or two-way replies. Opt-out and STOP handling is built in for any non-transactional messaging.
Start sending SMS for two-factor authentication today.
10 free credits · 5¢ per message · no contracts