What Happens with Previous OTP SMS Code when Resending
Last Updated:
Okta Classic Engine
Multi-Factor Authentication
Overview
This article clarifies whether the initial SMS OTP code is invalidated when another code is sent.
Applies To
- SMS OTP Authenticator
- Okta Classic Engine
Solution
The SMS OTP code will be available for 5 minutes regardless of whether another code is sent within that time frame. Sending another code will not invalidate the initial one that is generated. The only thing that will invalidate the SMS OTP code is that it has been more than 5 minutes since it was initiated. Wait 5 minutes for the code to be invalidated.
