Keep OTPs and Recovery Codes Secure
Understand which verification codes must remain private and the limited enrolment-consent exception.
Codes that must remain private
- Login OTP
- Mobile-number change OTP
- Email-change OTP
- Lost-phone recovery email code
- New-mobile recovery OTP
- Subscription or payment authentication codes
VR SPORT Support will not ask for these codes
Do not share a login, account-change or recovery OTP with support, an Academy owner, a Coach, another Player or another Academy staff member. Anyone with the code may be able to complete the protected action.
Enrolment-consent OTP exception
When an Academy or Independent Coach invites a Coach or Player, the app may intentionally send a consent OTP to the invited person. That code is shared only with the specific inviting Academy or Coach to confirm that single enrolment or attachment. It must not be reused for login, recovery or account changes.
Safe code practices
- Check what action triggered the code before entering or sharing it.
- Use only the latest code.
- Do not forward screenshots containing the code.
- Ignore unexpected codes and review account access.
- Contact support if codes arrive repeatedly without an action from you.