Hi, Correct me if I'm wrong but as far as I see the the only way to reset your OTP is part of the reset password via email - optional feature (or disable otp for that user in the admin ui) which seems to make the OTP usage as 2sv heaps less secure than it should be considering that it can be reset together with the password via email. >From reading the docs to make a reset OTP via sms for example, an authentication spi needs to be implemented, isnt it? Any plans to implement a more secure otp reset as standard feature in KeyCloak? Thanks, Dumitru _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user