Hey Bubble community! ![]()
We’re thrilled to introduce the GS Time-Based OTP Generator—a plugin designed to help you build secure, time-sensitive, one-time password (OTP) login flows between your Bubble mobile app and web application.
What It Does
This plugin lets your users log in to your web app using a 6-digit OTP generated from your mobile app—all based on time-based one-time password (TOTP) technology, similar to what you see in Authenticator apps.
Core Features
Generate Secret Key—Unique to each user at registration
Generate OTP—Create 6-digit codes based on the secret key and time
Verify OTP—Confirm if the code is valid during login
Countdown Timer (Optional)—Show remaining time for OTP validity
Mobile-to-Web Login Use Case
The user signs up on your web app
A secret key is generated and saved.
The user opens the mobile app
OTP is generated and displayed.
The user logs in on the web
Enters email and OTP.
OTP is verified, and login proceeds securely.
It’s passwordless, secure, and simple. ![]()
How to Implement
Web App: Generate and store secret key during signup
Mobile App: Use secret key to generate OTP
Web App: Verify OTP during login
Optional: Use the built-in countdown timer to show OTP expiration
Full step-by-step integration is available in the plugin documentation.
Best Practices
Never expose or display the secret key
Guide users clearly through the mobile-to-web login flow
Add recovery/reset options for lost devices
VIEW SAMPLE CODE URL
DEMO PAGE
Let us know if you have questions, feature suggestions, or if you’d like to share how you’re using it in your own app!
—
Empatech Team
Bringing security and simplicity to your Bubble apps.