Add-on Documentation from JCOGS Design

Provider ConfigurationLast updated: 20 January 2026

Provider Settings pages control operational settings for delivery providers. These settings affect how OTP Pro generates, validates, and/or delivers OTP payloads (e.g. codes).

Authenticator App

The Authenticator provider is the baseline JCOGS OTP Pro delivery method. Members can use an authenticator app (TOTP) such as Google Authenticator, Microsoft Authenticator, 1Password, or Authy.

This section of the JCOGS OTP control panel system allows you to specify the specific way in which Authenticator codes are generated by JCOGS OTP Pro, and control aspects of their duration.

TOTP Configuration

These options control how JCOGS OTP Pro generates and validates time-based one-time passwords (TOTP). They are applied system-wide.

  • OTP Length (Digits) – the number of digits in each code (typically 6).
  • OTP Time Period – the time window (in seconds) for each code (typically 30 seconds).
  • OTP Algorithm – hash algorithm used by TOTP (SHA-1 for maximum compatibility; SHA-256 recommended; SHA-512 most secure).
QR Code Configuration

These options affect the QR code shown during setup.

  • QR Code Size – the pixel size used for the setup QR code.
  • Issuer Name – the label shown in authenticator apps (usually your site name or brand).
Recommended settings
  • Digits: 6
  • Period: 30 seconds
  • Algorithm: SHA-256 (unless you need maximum legacy compatibility)
  • Issuer Name: your site or organisation name

Usage Notes

Important: changing TOTP settings

Changing the TOTP digits, period, or algorithm will change which codes are considered valid. Members who have already set up an authenticator app may need to set up OTP again after such changes.

Email

The Email provider delivers an OTP payload to the member’s email address. It can deliver a code (for example email:code) and may support additional payloads registered by companion add-ons.

This section of the JCOGS OTP control panel system allows you to specify the specific way in which Authenticator codes are generated by JCOGS OTP Pro, and control aspects of their duration.

Prerequisites
  • Email delivery depends on ExpressionEngine’s email configuration.
  • The provider must be enabled and available to be offered as a delivery channel.
Configuration Options
  • From Name – the sender name shown in the recipient’s email client (defaults to your site name).
  • From Email Address – the sender address used for outgoing OTP emails (defaults to the EE webmaster email).
  • Code Expiry (Minutes) – used to populate expiry information in templates (for example {expiry_seconds} and {code_expiry_timestamp}).

Usage Notes

Note about expiry

The Email provider uses the expiry value to display accurate expiry information to members. For a consistent user experience, keep this aligned with how long you expect codes/links to remain valid.