How to Configure OTP Spam Preventer Addon?

Overview

The OTP Spam Preventer Addon helps prevent malicious or unwanted OTP requests by temporarily blocking users who exceed the defined request limit. This guide explains how to configure the OTP Spam Preventer Addon and set appropriate limits to protect your system from OTP abuse.

Configuration Steps

Follow the steps to configure the OTP Spam Preventer Addon.

• Click on the OTP Verification plugin from the left side menu.

• Go to the Addons tab.
• You can view all available OTP Verification Addons here.
• From the list, select the OTP Spam Preventer Addon and click on the Settings button.

• You will redirect to the OTP Spam Preventer settings.
• The addon is enabled by default. If it is not enabled, select the checkbox to enable it.

1. Basic Preventer Settings

Use the Basic Preventer Settings to control OTP requests and prevent unwanted OTP spam.

• Wait Time Between Requests: This setting allows you to define how long users must wait before requesting another OTP. For example, 60 seconds means users must wait 1 minute before requesting a new OTP.
• Maximum Attempts Allowed: This setting lets you define how many OTP requests are allowed. Once the limit is exceeded, the user will be blocked.
  For example, 3 attempts means the user will be blocked after 3 OTP requests.
• Block Duration: This setting defines how long the user will remain blocked after exceeding the allowed attempts.
  For example, 900 seconds means the user will be blocked for 15 minutes. (You can set any limit as per your requirement.)
• After completing the settings, click on the Save Settings button.

2. Advanced Settings

Daily & Hourly Limits

These settings allow you to set the maximum number of OTP requests a user can make within a specific time period.

• Set the maximum number of OTP requests a user can make in a single day. Once the daily limit is exceeded, the user will be blocked for the remaining time of the day.
  For example, 10 means a user can request OTP up to 10 times per day. After that, the user will be blocked until the next day. (You can set the OTP limit based on your requirements.)
• Set the maximum number of OTP requests a user can make in one hour. Once the hourly limit is exceeded, the user will be blocked for the remaining time of that hour.
  For example, 5 means a user can request OTP up to 5 times per hour. After that, the user will be blocked until the next hour. (You can adjust the OTP limit as per your needs.)

Trusted IP Addresses

You can whitelist trusted IP addresses that should not be blocked, even if they exceed the defined limits.

• Enter trusted IP addresses that should bypass all OTP restrictions.
• After that, click on the Save Settings button.

3. Blocked Users

This section allows you to view and manage users who are currently blocked due to exceeding OTP request limits or suspicious activity.

• User Identifier shows the details of the blocked user, such as phone number, email, or IP address.
• Block Reason displays why the user was blocked.
• Remaining Time shows how long the user will remain blocked.
• Actions allow you to manually unblock users if required.

• Clear All allows you to remove all users from the blocked list at once, and Refresh List updates the list to display the latest blocked users.

General Settings

• How to show country code drop-down on your form?
• How to change SMS and Email Template?
• How to change OTP Length and Validity Period?
• How to change the design of the OTP popup?