Understanding OTP Verification for Password Reset

When you reset your Landager password, we use a security mechanism called OTP (One-Time Password) to verify that you are the actual account owner. This page explains what OTP is, why we use it, and how it keeps your account safe.

What is OTP?

OTP stands for One-Time Password. It's a unique, randomly generated code that:

• Is sent to your registered email address
• Can only be used once
• Expires after a limited time window
• Verifies that the person requesting the password reset has access to the account's email

Think of it as a temporary digital key — it unlocks the password reset form for a brief moment, then becomes useless.

Why Does Landager Use OTP?

Without OTP verification, anyone who knows your email address could potentially reset your password. OTP adds a critical security layer:

1. Proves email ownership: Only someone who can read emails in your inbox can retrieve the code.
2. Prevents unauthorized resets: Even if someone knows your email, they can't reset your password without accessing your inbox.
3. Time-limited protection: Even if an OTP is somehow intercepted, it expires quickly and can't be reused.

How the OTP Flow Works

You click "Forgot Password"
         ↓
Enter your registered email
         ↓
Landager generates a unique OTP
         ↓
OTP is sent to your email inbox
         ↓
You enter the OTP on the verification screen
         ↓
Landager confirms the OTP is valid and not expired
         ↓
You're allowed to set a new password

OTP Best Practices

• Enter the OTP promptly: Codes are time-limited, so use them as soon as you receive them.
• Don't share OTP codes: Landager will never ask you to share an OTP with anyone, including our support team.
• Check your spam folder: If you don't see the email, look in Spam, Junk, or Promotions folders.
• Request a new code if expired: If your OTP expires before you enter it, simply restart the reset process to get a fresh code.

Security Note

OTP verification is only used for password resets. Your day-to-day sign-in uses either your email/password credentials or Google OAuth — no OTP required for normal logins.

For the complete password reset walkthrough, see How to Reset a Forgotten Password.