Step 01
Step 1
Enter your phone number; we send a one-time code over SMS.
Auth & IDRetail
Phone-OTP signup.
Sign in with your Indian phone number and a 6-digit OTP — no password to remember.
The problem
Why this exists.
Most people in India already prove who they are with their phone — UPI, bank logins, government services all converge on this one number.
Passwords are the friction layer that gets reused, leaked, and forgotten. We do not want to be the company that asks for one before earning your trust.
How it works · 3 steps
From input to outcome.
- Step 02
Step 2
Type the 6 digits; we mint a short-lived session and never see your SIM PIN.
- Step 03
Step 3
Add a 6-digit app PIN or biometric inside the app for repeat sign-ins.
Under the hood
The models and routes behind it.
Models called
No models cite this feature directly — backing logic is deterministic Python.
API routes
- POST /api/v1/auth/phone
Compliance posture
- DPDP §6 — phone number is collected with notice of purpose and retention window.
- TRAI commercial-communication rules — OTP SMS uses an approved transactional header.
- Rate-limited at the edge; brute-force protection on the OTP verifier.
What it's not
Phone-OTP is sign-in, not identity verification. KYC for any regulated product runs separately under documents-kyc.
Related · features & stories