Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi guys! I'm new to Ory. I was exploring Ory Kratos for user management and I wanted help with the 2-factor authentication via mail, much like what you see in educative and other platforms where once you have entered the credentials, you receive a one-time password in your email. I saw the documentation of Kratos, it explains how to use MFA and other stuff but I couldn't find anything for 2FA in the email. Would highly appreciate it if anyone can help, or can point me to any resources. Thanks!

You want people to put in let's say, user and password, and then email them a OTP?

<https://www.ory.sh/docs/kratos/mfa/overview#authentication-method-reference-amr>

I only know of sites that basically ask for your email and send you a OTP (link) to login. there's a little more detail here:
<https://github.com/ory/kratos/issues/2029>

but yeah, i am not sure if email as a MFA device is supported (yet). haven't seen that.

yes once they put in password.. then they have to enter the otp as well

okay I'll have a look at the github issue.. thanks!