# Additional Factors ## Enrol a user device for authentication using one-time passwords - [POST /v1/authentication_factors/otp/{channel}](https://api.weavr.io/products/payment-run/openapi/additional-factors/enroldeviceusingotpstepone.md): This is the first step in enrolling the logged-in user's mobile device, where a one-time password is sent to the device. _Note that on the Sandbox Environment, text messages are not sent and the one-time-password is always \"123456\"._ ## Verify enrolment of a user device for authentication using one-time passwords - [POST /v1/authentication_factors/otp/{channel}/verify](https://api.weavr.io/products/payment-run/openapi/additional-factors/enroldeviceusingotpsteptwo.md): The second step in enrolling the logged-in user (root or authorised user) to use one-time-passwords to enable verification of transactions. _Note that on the Sandbox Environment, text messages are not sent and the verificationCode is always set to \"123456\"._