OTP Best Practices: Code Length, Expiry, Retries and Fallback

The defaults that make OTP flows secure and easy to complete: 6-digit codes, short expiry, attempt and resend limits, autofill formats and channel fallback.