ABOUT OTP
A one-time password (OTP) is an automatically generated numeric or alphanumeric string of characters that authenticates a user for a single transaction or login session.
An OTP is more secure than a static password, especially a user-created password, which can be weak and reused across multiple accounts.
OTPs might replace traditional authentication login information or may be used in addition to it to add another layer of security.
OTP-COMMON TEST CASES
TC ID | FEATURE | TEST CASES/STEPS | EXP RESULT |
TC_OTP_33 | OTP | Objective: To validate if the OTP is delivered to the mobile phone number/email when the phone nunber/email are inactivated | OTP has to be generated; however, will not be received to the concerned mobile number/email |
TC_OTP_34 | OTP | Objective: To validate if the OTP is properly delivered when the user is in roaming | OTP has to be delivered to the mobile phone even when the user is in roaming |
TC_OTP_35 | OTP | Objective: To validate if the OTP is received when the user is Flight Mode | OTP has not to be received when the registered mobile device is in Flight mode The OTP has to be received only when the registered device is in General mode |
TC_OTP_36 | OTP | Objective: To validate if the OTP is generated when the mobile phone is switched off | 1. The OTP sms has to be received when the mobile device is switched on |
TC_OTP_37 | OTP | Objective: To validate if the OTP entered in the field is in encrypted mode (based on requirement) | The OTP has to be in the encrypted mode when the user enters the same in the password/OTP field |
TC_OTP_38 | OTP | Objective: To validate if the user is able to copy the encrypted OTP and use the same for the next transaction | The OTP has not to be copied OTP has not to be allowed for the next transaction |
TC_OTP_39 | OTP | Objective: To validate if the user is able to get OTP on call when click/tap on ‘OTP on Call’ button (Button name depends on the requirement) | The user has to get a voice call on the registered number and the OTP details has to be provided |
TC_OTP_40 | OTP | Objective: To validate if the user is getting call for OTP in stipulated time frame (As per requirement, generally within 1 min) | The user has to get a voice call on the registered number within the stipulated time limit (based on the requirement) |
TC_OTP_41 | OTP | Objective: To validate if the user is getting call every time they click/tap on OTP on Call button | The user has to get the number of calls the number times they Click/Tap on ‘OTP on Call’ button providing different OTPs |
TC_OTP_42 | OTP | Objective: To validate if the application is accepting the latest OTP when the user click/taps on the ‘OTP on Call’ button multiple times | 1. Entered OTP has to be displayed with encryption 2. The transaction has to be successfull. |
TC_OTP_43 | OTP | Objective: To validate if the application is accepting the old OTP when the user click/taps on the ‘OTP on Call’ button again after receiving the call for the OTP | The error message has to be displayed and transaction has not to be processed |
TC_OTP_44 | OTP | Objective: To validate if the user is able to receive the OTP in sms if they click/tap on ‘OTP on Call’ button Test Steps: | 1. The OTP details has to be received only via call 2. No sms with OTP has to be received on the device |
TC_OTP_45 | OTP | Objective: To validate if the user is able to receive the call for OTP when user is on another call | The user has to be notified about the new incoming call (OTP call) |
TC_OTP_46 | OTP | Objective: To validate the number of attempts the user is allowed to enter OTP received (based on the requirement) | 1. The user has to be allowed to enter wrong OTP for the limited number of trials 2. The user account has to be locked if the number of trials exceed the limit (based on the requirement) |
TC_OTP_47 | OTP | Objective: To validate if the support details are displayed if the user makes large number of attempts for OTP against same transaction and account is locked | 1. The user has to be allowed to enter wrong OTP for the limited number of trials 2. The user account has to be locked if the number of trials exceed the limit (based on the requirement) 3. Support details has to be displayed for reactivating the account (based on requirement) |
TC_OTP_48 | OTP | Objective: To validate if the OTP is displayed when the user enters the OTP and minimizes the App and then maximize it again Test Steps: | The OTP (password) has to be available in the Password field |
TC_OTP_49 | OTP | Objective: To validate if the OTP is displayed when user enters the OTP and closes the App and launches it again Test Steps: | The user has to request the OTP again to complete transaction [Varies on bussiness requirement] |
TC_OTP_50 | OTP | Objective: To validate if the OTP is displayed when the user enters the OTP and locks the device | ER: The entered OTP has to be shown in the password field |
TC_OTP_51 | OTP | Objective: To validate the latency between receipt of the OTP sms’ when requested multiple times | The sms with OTP has to be received in the message folder of the device with latency of 3-5 seconds depending on the requirement |
TC_OTP_52 | OTP | Objective: To validate if the OTP can be requested while logging in the application | The OTP has to be received to the registered device/email/token |
TC_OTP_53 | OTP | Objective: To validate if the user is able to login the application with the requested OTP | User has to be allowed to login application |
TC_OTP_54 | OTP | Objective: To validate if the user is able to login using the requested OTP even after 15 mins of the request (based on the requirement) | The user has to be allowed to login into the application |
TC_OTP_55 | OTP | Objective: To validate if the user is able to receive the OTP to the changed email when the user changes the registered email id Pre Req: | The user’s registered email id has to be changed The OTP has to be received to the newly registered email id only after the 48 hours from the time of new email registration (the time may vary depending on the requirements) New OTP has to be generated |