UsageLast updated: 20 January 2026
This section covers how to implement JCOGS OTP Pro in templates and how to operate it day-to-day.
User Preferences
Individual members of your ExpressionEngine site can control how they intereact with the OTP validation system.
My OTP Panels
Members with Control Panel access who have a role that includes optional or required use of the OTP system will see an additional menu item in the ExpressionEngine "Custom Menu" sidebar" - clicking on this menu item will open a madal that will provide the member with control over aspects of their use of OTP. This access is available to all users with Control Panel access regardless of their access permissions to parts of the Control Panel system.
Members that have Control Panel access, a role that includes optional or required use of the OTP system, and have access to the JCOGS OTP Pro add-on configuration system can lso access their OTP preferences through the "My OTP" section within the add-on's control panel sections.
For members who do not have access to the ExpressionEngine Control Panel system, access to their OTP preferences needs to be made available by the developer using the extensive JCOGS OTP Pro front-end tools dedicated to this purpose - or through use of of one of the example templates.
What preferences can be controlled?
The OTP options that can be controlled are determined by the roles assigned to the member.
The "My OTP" system gives the member the option to choose the delivery channel they will receive their authentiction codes through from within the options made available to the their role(s).
The "My OTP" system also gives a member the option to setup, reset and disable their use of the OTP system depending upon their role(s) settings - for example a member that is required to use OTP will not have the option of disabling their use of it.
Backup Codes
When a member first configures their OTP usage (or immediately after they reset their usage) JCOGS OTP Pro will include in the validation screen that appears after a successful setup / reset a set of Backup Codes that can be used to satisfy the OTP requirement for the members account. By default 10 codes are provided and each can only be used once.
Usage Notes
Most Onerous Role
When determining what rules will apply to a member's access to the OTP system, JCOGS OTP Pro implements a 'most onerous' test: it scans all the member roles assigned to the member, and first looks to see if any of the roles require use of OTP - and if so this becomes the members operational rule; if no role requires use of OTP it then scans for any roles that have OTP use as an optional feature - and if so sets their operational rule to 'optional'.
Similarly, JCOGS OTP Pro scans the allowed delivery channels by role and determines which are available to the member: if the member's role(s) require use of OTP then the delivery channels associated with those requirements are made available to the user. If the member's role(s) make OTP use optional then the member is able to choose from any of the delivery channels enabled for the roles assigned to them.
Role Management
JCOGS OTP Pro can enforce OTP for selected roles while leaving other roles optional or disabled.
How Enforcement Works
- Roles can be configured as Not Required / Optional / Required.
- Required roles can have a grace period before enforcement begins.
- Allowed/default delivery channels can be restricted per role.
- Members with multiple roles are evaluated using the most restrictive policy.
Recommended Approach
- Start by enforcing OTP for staff/admin roles first.
- Roll out to broader roles after confirming support and UX.
Management Tools
JCOGS OTP Pro includes operational tooling to help administrators manage OTP configuration and security.
Audit Logs
Review validation activity, investigate repeated failures, and export logs when needed.
Member Management
- View a member’s OTP status and recent events.
- Disable OTP for a member (for support workflows).
- Reset OTP (forces reconfiguration).
Statistics
High-level overview for adoption and validation trends.
Usage Notes
Use the sample templates as a starting point, then replace markup/styling to match your site.
Example Templates
JCOGS OTP Pro ships with sample templates that demonstrate common UX patterns and recommended implementations.
Installing Sample Templates
Use the JCOGS OTP Pro Control Panel settings to install sample templates. These are intended for learning and adaptation.
Patterns Included
- Inline progressive reveal login
- Two-step login + validate
- Modal login patterns
- AJAX-driven login flows
- User settings pages (delivery methods, trusted devices, disable OTP)
Usage Notes
Use the sample templates as a starting point, then replace markup/styling to match your site.