DESIGN AND IMPLEMENTATION OF A TWO FACTOR AUTHENTICATION LOGIN SYSTEM USING ONE TIME PASSWORD (OTP) WITH SMS

The increasing prevalence of cyber threats and unauthorized access to digital platforms has necessitated the development of more secure authentication mechanisms. This project focuses on the design and implementation of a Two-Factor Authentication (2FA) login system utilizing One-Time Passwords (OTP) delivered via SMS. The system aims to enhance security by integrating something the user knows (password) with something the user possesses (mobile device). The proposed system employs a secure backend framework to generate unique OTPs for each login attempt. These OTPs are delivered to the user's registered mobile number, ensuring an additional layer of security. The system is designed to prevent unauthorized access, even in cases of compromised passwords, as OTPs are time-sensitive and cannot be reused. Implementation involves integrating a robust SMS gateway API for OTP delivery, secure database management for user credentials, and encryption techniques to safeguard communication channels. The usability and effectiveness of the system were evaluated based on speed, reliability of OTP delivery, and user experience. This project contributes to the field of cybersecurity by providing an affordable, efficient, and user-friendly solution for enhancing login security. The design can be applied across various platforms, including online banking, e-commerce, and other web-based applications, ensuring data integrity and user privacy.