Reset Password Email/SMS OTP

Drupal by default sends Password Reset URL by email to user's email id in password recovery mail, but Reset Password Email/SMS OTP module sends random generated one time passcode by email or SMS instead of the reset URL to the user.

How does it work for the user?

So the process is as follows for the user:

1. Go to reset password, enter email address, and choose SMS or Email to recieve OTP*
2. Retrieve OTP from SMS or Email
3. Enter it in the validate OTP field and submit
4. Update password and submit

* If SMS is configured. Additionally the default choice is selected via the configuration of this module.

Module Configuration Steps

Set up the module

• Optionally install the SMS dependencies (composer require drupal/key twilio/sdk)
• After enabling the module, manage configuration at "/admin/config/people/reset-password-email-otp"
• Set the configuration for the one time passcode, the email, and various labels in the form process.

Add the reset password OTP block

• Go to the "Block layout" page (under Structure) and use any of the "Place block" buttons to create a Reset Password Email OTP Form block.
• Or use Twig Tweak to render the block anywhere using {{ drupal_block('reset_password_email_otp_form') }}