If you have to send OTP or PW by SMS for auto login. Why not encrypt it, so only that specific instance of app can decrypt & login? #RFC Posted on May 12, 2017 by @thej