How do you test OTP (One Time Password) Feature in the Applications? 

What is OTP Feature?

To answer this question, we should have knowledge on OTP Feature.

OTP stands for One Time Password.

Its implemented by application as part of Security Measures.

For example, Banking applications like Netbanking etc. send OTP for their Customers email ids or mobile numbers to approve transactions and to confirm whether they are the ones who is actually doing the transactions. 

We can test the OTP Feature in Applications as below:

• Whether the Applications are asking us to send OTP to Email or Mobile .
• Able to Receive OTP without much delay.
• Able to confirm the OTP and approve the transaction.
• Wrongly entered OTPs are not approved.
• Able to generate another OTP when the previous generated OTP is not received.
• Able to make OTP voice call when the previous generated OTPs are not received.
• Previously received OTPs are not working, once New OTPs are generated.
• OTPs are expiring after specified time and cannot be used for approving the transactions etc.
• OTP cannot be used for multiple transactions.
• Always a New OTP is generated.
• OTP should be guessable.
• OTPs are case sensitive.

And many more are possible