Email OTP Verification

Steps

1. Create a share link with Require Email OTP checked
2. Open the share link in incognito
3. Enter email address
4. Receive OTP email
5. Enter 6-digit code
6. Access document

Verify (7 checks)

• OTP gate appears before document access
• Email with 6-digit code received within 30 seconds
• Code expires after 10 minutes
• Invalid code shows error message
• Rate limit (3 OTPs per 10 min) enforced with 429 response
• After OTP verification, document loads normally
• Splunk logs show OTP send and verify events