Hey folks! I'm working on an app that requires SMS-based OTP verification. I'm looking to avoid pricey services like Twilio if possible, so I'm considering self-hosted or open-source SMS gateways. I'm evaluating options like Jasmin, Kannel, playSMS, Gammu, SMSTools3, and jSMPP. Here are my needs: reliable message delivery (very important for OTPs!), compatibility with SMPP or HTTP APIs, Docker-friendly setups, delivery reports for tracking, and scalability since I don't want to stay at hobby level forever. For anyone experienced with this, could you recommend the best option for OTP usage in 2024/2025? Are they all similar or does one stand out? Are there any unexpected hurdles with SMPP providers? Is the USB modem approach still viable for small-scale OTP projects? I'd love tutorials or beginner-friendly resources as well. Also, do I need to consider country-specific regulations about sender IDs and blocking? I'm quite new to SMS gateways, so any 'I wish I knew' advice would be hugely appreciated. Thanks a lot!
5 Answers
For free options, I hear good things about Courier's free plan for sending SMS. Just keep in mind to use a branded link, like with Rebrandly, to boost click rates for your messages.
Honestly, I would steer clear of SMS for OTPs. They're not the most secure option. Consider using an authenticator app instead if you can.
If you think SMS OTPs are secure, consider re-evaluating that assumption. Also, crunch the numbers on your yearly sending volume. Oftentimes, using a platform like Twilio may actually be cheaper and less hassle than running your own setup with all the regulatory and operational headaches that come with it.
If you're set on going the self-hosted route, don’t forget about your cell plan. Make sure your data plan supports bulk messaging without contravening terms and conditions, especially if your volume goes from a few to thousands.
Honestly, if you're looking for reliability without the costs, be prepared for a bit of a struggle. Self-hosted gateways can be tricky, and many believe they're not as reliable as paid services. Just something to think about!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures