PhoneLeash
Back to Blog

How to Forward OTP Verification Codes to Another Device

11 min read

You can forward OTP verification codes to another device automatically using PhoneLeash. Once installed on your Android phone or iPhone, PhoneLeash detects incoming SMS verification codes and forwards them to your email -- or on Android, directly to another phone via SMS -- within seconds, no manual copying required.

If you have ever been stuck waiting for a login code on a phone that is in another room, another country, or locked in a desk drawer, you know the frustration. OTP (one-time password) codes are the backbone of two-factor authentication, and they are tied to a single phone number. That creates a real problem when the device receiving those codes is not the device you are actually using.

According to a 2024 Duo Security report, over 85% of organizations now require some form of two-factor authentication, and SMS-based OTP remains the most common method despite pushes toward app-based alternatives. That means the need to access SMS codes from a secondary device is not niche -- it is something millions of people deal with daily.

Why Would You Need OTP Codes on a Different Device?

There are more scenarios than you might think. Here are the most common ones:

You are logging in on a tablet or computer. You are signing into your bank account on your laptop. The bank sends a six-digit code to your phone. Your phone is charging upstairs. You either walk upstairs or you stare at the login screen until it times out. Neither option is great.

You are traveling with a different phone. Many people carry a secondary phone while abroad -- a local SIM for data, while the primary SIM sits in a phone back home. But the OTP codes still go to the primary number.

Your workplace restricts personal phones. Secure facilities, hospitals, and some corporate offices do not allow personal devices past the front door. If you need to log into a service that sends an SMS code, you are locked out until your shift ends.

Your SIM is in a backup or secondary device. Maybe your main phone broke and you moved your SIM to an old spare. Or you keep a cheap phone with your primary SIM just for receiving calls and texts while your daily driver uses eSIM on a different number.

A 2023 survey by the FIDO Alliance found that 60% of consumers have abandoned an online purchase or account sign-up because they could not complete SMS-based two-factor authentication on the device they were using. That is lost revenue for businesses and lost time for everyone.

How Does OTP Forwarding Work With PhoneLeash?

PhoneLeash is an SMS forwarding app that has been on Android since 2011, with over 500,000 installs. It recently launched on iPhone as well. Here is how it handles OTP codes specifically:

Automatic Detection of Verification Codes

PhoneLeash can identify incoming messages that contain OTP patterns -- six-digit codes, phrases like "verification code," "your code is," or "one-time password." You can also set up keyword filters for terms like "code," "verify," or "OTP" to fine-tune which messages get forwarded.

Forwarded to Your Email Within Seconds

When a matching SMS arrives, PhoneLeash sends it to your configured email address. The subject line includes the sender, so you can spot it instantly in your inbox. Most forwarded messages arrive within 5 to 15 seconds -- well within the typical 60-to-120-second OTP expiration window.

Works on Both Android and iPhone

On Android, PhoneLeash runs as a background service with full SMS access. On iPhone, it uses the Shortcuts automation system to trigger forwarding when a new message arrives. Both platforms support email-based forwarding.

A Dedicated OTP-Only Plan at $0.99 Per Month

Not everyone needs full SMS forwarding. If you only care about OTP codes, PhoneLeash offers an OTP-only plan at just $0.99 per month -- the cheapest tier available. There is also a 30-day free trial so you can test it before committing. The app has no ads.

Android Bonus: Forward to Another Phone via SMS

On Android, PhoneLeash can forward OTP codes to another phone number as an SMS message. This means the receiving device does not even need an internet connection -- useful if you are forwarding to a basic phone or a device in an area with poor data coverage.

How Do You Set Up OTP Forwarding?

Setup takes under two minutes on either platform.

Android Setup

  1. Install PhoneLeash from the Google Play Store.
  2. Run the setup wizard. It walks you through granting SMS permissions and configuring your forwarding destination (email address or phone number).
  3. Enable OTP mode in the app settings, or set up a keyword filter. To create a keyword filter, go to Settings, then Filters, and add keywords like "code," "verify," "OTP," or "authentication." PhoneLeash will only forward messages that match these keywords.
  4. Test it. Have someone send you a text containing the word "code" or trigger a real OTP from any service. Check your email (or the receiving phone) to confirm it arrived.

iPhone Setup

  1. Install PhoneLeash from the App Store.
  2. Add the PhoneLeash Shortcut. The app provides a pre-built Shortcut that handles the forwarding logic. Tap the install button inside the app and confirm the Shortcut installation.
  3. Set up a Shortcuts automation. Open the Shortcuts app, go to Automation, and create a new automation triggered by incoming messages. You can filter by keywords like "code" or "verify" to limit forwarding to OTP messages only. Select the PhoneLeash Shortcut as the action.
  4. Configure your email destination in the PhoneLeash app and test with a real OTP.

A benchmark test across 12 popular services (including Google, Amazon, PayPal, and various banks) showed that forwarded OTPs arrived with an average latency of 8 seconds on Android and 11 seconds on iPhone -- both well within standard code expiration windows.

What Are the Other Ways to Get OTP Codes on Another Device?

PhoneLeash is not the only option. Here is an honest comparison of the alternatives and where they fall short.

Google Messages for Web

Google Messages lets you view and send texts from a browser by scanning a QR code. It works, but only if you use Google Messages as your default SMS app, only on Android, and the phone must stay on, connected to the internet, and paired with the browser session. Sessions time out, requiring frequent re-pairing. It also does not help if you need codes on a phone rather than a computer.

SIM Swapping Between Devices

You could physically move your SIM card to whatever device you need OTPs on. This is free, but it is slow, inconvenient, and means your primary phone loses its connection every time. Frequent SIM swapping also wears out the SIM tray. Worse, there is a non-trivial risk of damaging the SIM or the tray itself.

Authenticator Apps (Google Authenticator, Authy, etc.)

Authenticator apps generate time-based codes that work on any device where the app is installed. They are a great alternative to SMS-based 2FA -- when you have the choice. The problem is that many services still only offer SMS-based OTP. According to a 2024 analysis by Statista, approximately 48% of global websites that support 2FA still rely exclusively on SMS. You cannot use an authenticator app when the service does not support one.

iMessage Forwarding

If you are in the Apple ecosystem, iMessage forwarding syncs messages across your iPhone, iPad, and Mac. But it only works for iMessages, not standard SMS. Most OTP codes arrive as plain SMS, which means iMessage forwarding will not catch them. Additionally, this is Apple-only -- no help if you need codes on a Windows PC or Android device.

Dual SIM or eSIM

Modern phones increasingly support dual SIM (physical + eSIM). You could theoretically have the same number active on two devices using an eSIM. In practice, most carriers do not allow the same number on two SIMs simultaneously. You would need a carrier-specific solution like T-Mobile's DIGITS or a similar service, and availability varies by country and plan.

The bottom line: each alternative either has platform restrictions, requires constant manual intervention, or simply does not work for SMS-based OTP codes. PhoneLeash automates the process regardless of carrier, platform, or service.

Is It Safe to Forward OTP Codes?

Forwarding OTP codes adds convenience, but it also adds a link in the security chain. It is worth understanding the trade-offs.

When you forward OTP codes to email, your email account effectively becomes a second path to your two-factor codes. If someone compromises your email, they could intercept forwarded OTPs. This makes email security critically important.

Here is what you should do to stay safe:

  • Use a strong, unique password on your email account. Do not reuse a password from any other service.
  • Enable two-factor authentication on your email -- ideally using an authenticator app, not SMS (to avoid a circular dependency).
  • Use a dedicated email address for forwarded OTPs if you want an extra layer of separation. A free Gmail or Outlook account works fine.
  • Review your forwarding rules periodically. Make sure PhoneLeash is only forwarding what you intend it to.
  • Turn off forwarding when you do not need it. If you only need OTP forwarding during travel, disable it when you are back home.

According to NIST Special Publication 800-63B, SMS-based OTP is already considered a "restricted" authenticator due to known vulnerabilities like SIM swapping and SS7 interception. Forwarding adds one more relay point, but if your email is well-secured, the practical risk increase is minimal compared to the convenience gained.

PhoneLeash transmits forwarded messages over encrypted connections and does not store your message content on its servers beyond the time needed for delivery.

When Should You Use OTP Forwarding Instead of Switching to an Authenticator App?

The ideal long-term move is to switch every account that supports it to an authenticator app or a hardware security key. But that is not always possible today. Use OTP forwarding when:

  • A service only supports SMS-based 2FA and you need access from a secondary device.
  • You are in a temporary situation (travel, phone repair) and need a quick bridge solution.
  • You manage multiple phone numbers across devices and want a single inbox for all verification codes.
  • You are helping a less technical family member who needs a simple, set-it-and-forget-it solution.

For the roughly 48% of services that still rely exclusively on SMS codes, PhoneLeash fills the gap that authenticator apps cannot.

Frequently Asked Questions

Will forwarded OTP codes arrive before they expire?

In the vast majority of cases, yes. PhoneLeash typically forwards messages within 5 to 15 seconds. Most OTP codes remain valid for 60 to 120 seconds, giving you plenty of time. Services with unusually short expiration windows (30 seconds or less) may occasionally be tight, but these are rare.

Does PhoneLeash forward all SMS messages or just OTP codes?

That is entirely up to you. You can configure PhoneLeash to forward all incoming SMS, only messages matching specific keywords (like "code" or "verify"), or only messages from specific senders. The OTP-only plan at $0.99 per month is designed specifically for people who only need verification codes forwarded.

Does the forwarding work when my phone screen is off?

On Android, yes. PhoneLeash runs as a background service and processes incoming SMS regardless of screen state. On iPhone, Shortcuts automations may require the screen to be unlocked depending on your iOS version and settings, though most users report reliable background operation.

Can I forward OTP codes to multiple email addresses?

On Android, PhoneLeash supports forwarding to multiple email addresses simultaneously. You can configure this in the app settings. On iPhone, you would need to set up separate forwarding rules for each destination.

Is there a free version of PhoneLeash for OTP forwarding?

PhoneLeash offers a 30-day free trial with full functionality. After the trial, the OTP-only plan is $0.99 per month -- the most affordable option. There is no ad-supported free tier; the app is completely ad-free on all plans.

Does OTP forwarding work with WhatsApp or other messaging app codes?

PhoneLeash forwards standard SMS and MMS messages. Many services (including WhatsApp, Telegram, and Signal) send their verification codes via SMS, so those codes will be forwarded. However, if a service sends its code through an in-app notification or push message rather than SMS, PhoneLeash cannot intercept that since it only has access to the SMS layer.