Gesture-Based One-Time Password Verification for Secure Two-Factor Authentication

Abstract

Two-factor authentication (2FA) is widely used to improve digital security. However, many existing methods still rely on manual OTP entry, stored biometric data, or specialized hardware, making them vulnerable to threats such as phishing, spoofing, deepfake-based impersonation, and input interception. This research proposes a gesture-based OTP verification mechanism that enhances traditional 2FA by replacing manual OTP input with real-time hand gesture recognition. After successful credential validation, a four-digit OTP is sent to the user's email, and the user displays each digit sequentially using hand gestures captured through a camera. The system uses MediaPipe Hands, a pre-trained hand landmark detection model, to recognize numerical gestures without permanently storing sensitive biometric data. By combining code-based verification with real-time gesture interaction, the proposed approach aims to improve security, enhance usability, and reduce privacy concerns associated with conventional authentication systems.