How to Use the Active Sessions Feature on OTPZap

This article covers How to Use the Active Sessions Feature on OTPZap. If you are looking for information about active sessions. This article explains it end to end: the basics, how it works, and tips to keep things smooth.

OTP security landscape

SMS OTP is still popular but is actually vulnerable to SIM swap, phishing, and intercept. Understanding the trade-offs between 2FA methods is important if you care about security.

Security best practices

• Use TOTP (Google Authenticator) for important accounts (safer than SMS).
• Enable SIM PIN/biometric to prevent unauthorized re-issue.
• Never share OTP via WhatsApp/Telegram, whoever gets access will get the OTP.
• For very important accounts, use hardware tokens (YubiKey).

What does OTPZap do for security?

• Session tokens are SHA-256 hashed, soft IP check + 2FA TOTP for admin.
• Idempotency checks on all financial transactions so double-spend will not happen.
• Active Sessions feature in dashboard so you can revoke foreign devices.
• Anti-fraud detection in referral and promo with duplicate IP flagging.