The OTPCredential interface of the WebOTP API contains the attributes that are returned when a new one-time password is retrieved.

This interface also inherits properties from Credential.

OTPCredential.code Experimental

The one-time password.

None.

None.

The below code triggers the browser's permission flow when an SMS message arrives. If permission is granted then the promise resolves with an OTPCredential object. See this code as part of a simple demo.

navigator.credentials
  .get({
    otp: { transport: ["sms"] },
    signal: ac.signal,
  })
  .then((otp) => {
    input.value = otp.code;
    if (form) form.submit();
  })
  .catch((err) => {
    console.error(err);
  });