IntroductionLast updated: 20 January 2026

JCOGS OTP Pro is a professional two-factor authentication (2FA) add-on for ExpressionEngine. It provides a flexible OTP (one-time password) workflow, modern delivery options, and a Control Panel experience designed for both site owners and developers.

Core Capabilities

• Authenticator App (TOTP)
  Time-based one-time passwords via authenticator apps.
• Delivery Channels
  Optional delivery transports (e.g. Email) that send a verification payload (e.g. a code or a magic link).
• Role-based Enforcement
  Require OTP for selected member roles, with sensible defaults and clear admin controls.
• Audit & Operational Tools
  Audit logging, member management utilities, and statistics to help you operate OTP safely.

How JCOGS OTP Pro Works

JCOGS OTP Pro makes it possible for you to seamlessly integrate a requirement for a time-sensitive "One-Time Password" (OTP) into your site's EE login sequence. Integration with the EE control panel login is automatic, and comprehensive tools are provided to enable you to integrate the use of OTP into your front-end login sequence.

JCOGS OTP Pro provides multiple channels for you to work with the one-time password behaviour:

• use of Authenticator apps - configure your authenticator app using the provided QR Code / key and then enter the required code when asked (no delivery required)
• use of a delivery mechanism to communicate the OTP code to the user - email is provided as a base option, with other delivery mechanisms available as options (use of a delivery mechanism required)
• choose a different payload - optionally choose to send something other than an OTP code - such as a "magic link" (use of a delivery mechanism required)

This channel model makes it possible for you to tailor your implementation of OTP to perfectly suit the needs of your site and your users, in a way that is both efficient and easy to integrate with your site templates.

Minimum Requirements

OTP Pro requires ExpressionEngine (EE7+) and PHP 8.2+, and access to a TOTP authenticator app, such as Google Authenticator, 1Password, or LastPass.

Installation

• Copy the jcogs_otp_pro folder to system/user/addons and install via the ExpressionEngine Control Panel.
• Copy the themes/user/jcogs_otp_pro folder to the /themes/user folder in your site's web-root directory
• Navigate to the Add-ons setup page for your site and locate "JCOGS OTP Pro" and install it

Companion Add-ons

JCOGS OTP Pro supports optional companion add-ons that register additional channels for OTP use (for example, HTML email templates and magic links).