Five Easy Steps for Successful 2-Factor Authentication

Traditionally, implementing two-factor authentication for web-based services also meant introducing additional hardware. Nowadays, enterprises and Internet giants need a simpler and faster solution to verify their global user base.

SMS-based 2FA sends a one-time PIN code to users’ mobile phones via text message, immediately turning their device into an extra layer of security. It doesn’t require extra equipment and works on both the latest smartphones and decade-old feature phones.

Step 1: Register your app

Before you start generating and sending PIN codes over Infobip 2FA service, you’ll have to register your app on our platform and provide us with the name of your app.

The name of your app will be enough for you to proceed to the next step if you require only basic usage. For advanced usage, you’ll be able to configure the additional features for your app: PIN time to live, PIN attempts, verification attempts, verification interval, etc.

Find out more about additional features for your app and advanced usage of this method.

Step 2: Create a message

After you have registered your app for the 2FA application, the next step will be to create a message that you want to send to your app users.

A PIN code is generated as part of your message, so you’ll need to specify its features:

PIN type: Type of PIN code that will be generated and sent as part of 2FA message. You can set PIN type to numeric, alpha, alphanumeric, or hex. PIN length: PIN code length between 1 and 8 characters.

Find out more about additional message parameters and their usage.

Step 3: Generate API key

In order to start sending and verifying PINs from the client side, you need a valid Infobip API key.

Generate your API key with this simple method:

Response:

Step 4: PIN generation and sending

If you have created a 2FA application (Step 1), configured your message (Step 2) and obtained your API key for authorization (Step 3), you are ready to generate and send PINs to your users.

A response that indicates if everything is ok with your request will be immediately sent to you:

Find out more about additional features for sending PIN codes.

Step 5: Verify PIN

The final step is to verify if the user entered the correct PIN that he had received on his mobile phone.

Simply forward us the value the user entered in your app, and we will verify the PIN:

If the PIN is correct, you will receive this response:

If the PIN is wrong, you will receive this response:

To see how easy it is to integrate our 2FA solution into your mobile app check out our free demo app and browse through our Android SDK documentation.