Built for FBC products

One secure OTP layer for every product you ship.

Generate, deliver, and verify one-time passwords over Email, SMS, and WhatsApp through a single API — with per-project keys, policies, and a full audit trail.

Hashed codes, never stored in plain text
Expiry & attempt limits per project

FBC Verify now

Your verification code is 482 916. It expires in 5 minutes.

Enter verification code

Waiting for code… 04:59

Email delivered

Verified · 182 ms

Deliver over Email SMS WhatsApp SMTP

Features

Everything an OTP flow needs, in one place

Stop rebuilding code generation, delivery, and verification inside every app. Configure it once, call it from anywhere.

Project isolation

Each product gets its own project, team, and API keys — secrets stay scoped to where they belong.

Flexible policies

Set code length, numeric or alphanumeric kinds, expiry windows, and max attempts per key.

Multi-channel delivery

Route codes through NotifyFBC for Email, SMS, and WhatsApp with one consistent request shape.

Secure by default

Codes are hashed, secrets are encrypted at rest, and every verification is rate-limited.

Live analytics

Track sends, verifications, failures, and expiries per project from a single dashboard.

Built-in API tester

Send and verify real OTPs from the console before writing a single line of integration code.

How it works

Live in three steps

1
Create a project

Register your product, invite your team, and link a Notify connection for delivery.
2
Issue an API key

Generate a key and set the OTP policy — length, kind, expiry, and attempts.
3
Send & verify

Call /send when a user needs a code and /verify when they enter it.

Developer API

Two endpoints. That's the whole integration.

Send a code with your project code and API key, then verify what the user typed. Phone numbers are normalised automatically for Tanzanian mobiles.

JSON over HTTPS
Challenge id returned on send
Clear success and error messages

POST https://otp.pistl.co.tz/api/v1/otp/send

{
  "recipient": "255712345678",
  "projectCode": "MYAPP",
  "apiKey": "sk_live_••••••••",
  "medium": "Sms",
  "purpose": "Login"
}

POST https://otp.pistl.co.tz/api/v1/otp/verify

{
  "recipient": "255712345678",
  "projectCode": "MYAPP",
  "apiKey": "sk_live_••••••••",
  "otp": "482916",
  "purpose": "Login"
}