Answer
Verification code is the product name for the confirmation code in a form: “Enter the code from the message”.
Technically it is almost always an OTP: your server sent a one-time code, the user read it on the phone and typed it into the field. In the Cascade API this is the pair /otp/send → /otp/verify.
Why different words:
- OTP / One-Time Password — a security and API documentation term.
- Verification code — text on buttons and in the UI.
- Authentication — a broader login/2FA context: see “What is authentication?”.
Canonical OTP explanation: “What is OTP?”. Input errors: “What if the code is wrong?”.