Riffle

A 2×2 one-time code field whose tiles shuffle and lock into a check.

A UI component for any site
Plain HTML, CSS and JavaScript, no dependencies
Use it in unlimited client projects

Checkout opens soon.
14-day refund if it doesn’t do what the demo shows.

BundleAll forms: 11 pieces for $118, you save $29

Riffle: a look at the source

// Riffle — a 2×2 one-time code field whose tiles shuffle and lock into a check. No dependencies.
// One real <input> sits invisibly over the four tiles, so paste, SMS autofill, the numeric
// keyboard and screen readers all work the normal way. The tiles are drawn on top and moved
// with the `translate` property, so a move that is interrupted continues from where it is.

const EASE_OUT = 'cubic-bezier(.23, 1, .32, 1)';
const EASE_IN_OUT = 'cubic-bezier(.77, 0, .175, 1)';
const RECOIL = 'linear(0, .087, .268, .464, .636, .771, .869, .933, .973, .996, 1.007, 1.011, 1.011, 1.009, 1.007, 1.005, 1.003, 1.002, 1.001, 1.001, 1, 1, 1)';

// grid positions: 0 top-left, 1 top-right, 2 bottom-left, 3 bottom-right
// a move maps the position a tile is at to the position it goes to
const MOVES = {
  cw:   [1, 3, 0, 2], // every tile one step clockwise
  ccw:  [2, 0, 3, 1], // …and anticlockwise
  diag: [3, 2, 1, 0], // the diagonals swap, one pair passing over the other
  cols: [1, 0, 3, 2], // left and right columns swap
  rows: [2, 3, 0, 1], // top and bottom rows swap
};
const CORNER = ['tl', 'tr', 'bl', 'br'];
const CLOCKWISE = [0, 1, 3, 2];          // position → place in the clockwise round
const JAM = [[1, 0], [0, 1], [0, -1], [-1, 0]]; // position → the clockwise direction it would move in
const col = p => p & 1;
const row = p => p >> 1;

const DEFAULT_MESSAGES = {
  checking: 'Checking the code…',
  success: 'Verified.',
  error: 'That code didn’t match. Try again.',
  sent: 'We sent you a new code.',
  resend: 'Resend code',
  resendIn: time => `Resend code in ${time}`,
};

export function init(root, {
  onComplete,          // async (code) => resolve when it matches; return false or throw when it doesn't
  onChange,            // (code) => void, on every change
  onResend,            // () => void, when the user asks for a new code
  onContinue,          // () => void, the button shown once verified
  autoSubmit = true,   // check as soon as the last digit is in
  resendAfter = 30,    // seconds before "Resend code" can be pressed; 0 hides the wait
…  380 more lines in the zip

/* Riffle — a 2×2 one-time code field whose tiles shuffle and lock into a check */
.riffle {
  --riffle-accent: #2f6bff;
  --riffle-ok: #0fa877;
  --riffle-bad: #e5484d;
  --riffle-ink: #0e1022;
  --riffle-muted: #5d6178;
  --riffle-card: #ffffff;
  --riffle-card-2: #f6f7fc;
  --riffle-edge: rgb(14 16 34 / .08);
  --riffle-tile: #f1f2f9;
  --riffle-tile-edge: rgb(14 16 34 / .1);
  --riffle-tile-filled: #ffffff;
  --riffle-aura: rgb(47 107 255 / .08);
  --riffle-button: #0e1022;
  --riffle-button-ink: #ffffff;
  --riffle-shadow: 0 1px 2px rgb(14 16 34 / .05), 0 24px 60px -28px rgb(30 40 90 / .35);
  --riffle-size: 84px;
  --riffle-gap: 12px;
  --riffle-radius: 28px;
  --riffle-tile-radius: 22px;
  --riffle-seal-radius: 30px;
  --riffle-font: "SF Pro Text", "Inter", system-ui, -apple-system, "Segoe UI", sans-serif;
  --riffle-digit-font: ui-rounded, "SF Pro Rounded", "Nunito", system-ui, -apple-system, sans-serif;
  --riffle-ease: cubic-bezier(.23, 1, .32, 1);
  /* underdamped spring (damping .68, response .42s): one soft overshoot as a tile lands */
  --riffle-glide: linear(0, .062, .205, .381, .555, .709, .834, .926, .99, 1.028, 1.048, 1.054, 1.052, 1.044, 1.035, 1.025, 1.017, 1.01, 1.005, 1.001, .999, .997, .997, .997, .998, .998, .999, .999, 1);
  /* near-critical spring (damping .82, response .36s): the ring and the final seal, no bounce */
  --riffle-settle: linear(0, .087, .268, .464, .636, .771, .869, .933, .973, .996, 1.007, 1.011, 1.011, 1.009, 1.007, 1.005, 1.003, 1.002, 1.001, 1.001, 1, 1, 1);
  --riffle-move: 420ms; /* set per move by riffle.js */

  position: relative;
  isolation: isolate;
  display: grid;
  gap: 22px;
  width: min(400px, 100%);
  padding: 32px 28px 24px;
  box-sizing: border-box;
  border-radius: var(--riffle-radius);
  background: linear-gradient(180deg, var(--riffle-card), var(--riffle-card-2));
…  312 more lines in the zip

Ask a question

What it does

A complete "enter the code we sent you" card with four tiles, two up and two down. A glowing ring glides to the tile that takes the next digit, and each digit stamps down into its tile. While the code is checked, a light runs round the four tiles. A wrong code makes the tiles start to turn, jam after a few pixels and spring back red while the digits drop out. A right one sets the tiles shuffling: a clockwise turn, a diagonal cross where one pair passes over the other, a row swap, a turn back. Then the gaps close, the four become one green square, a check draws across it and a Continue button rises.

Good for: Two-step sign-in, phone and email confirmation, PIN-style confirmations, any screen that asks for a short one-time code and deserves a moment at the end.
How it works: One real input sits invisibly over the tiles, so paste, SMS autofill and screen readers work the usual way. Your check runs as soon as the fourth digit is in, and its answer picks the ending. The shuffle is a list of named moves you can reorder or shorten. A resend button counts down before it can be pressed.
How to use: Copy two files, paste the markup, pass your own onComplete(code).

Price: $12, one payment
Version: 1.0.0
Code size: 9 KB gzipped
Dependencies: None
Built with: HTML, CSS, JavaScript
Category: Form
Licence: Unlimited personal and client projects
In the zip: riffle.css riffle.jsthe component
index.htmla plain example page
README.md package.json vite.config.js LICENSE.md

Use it in your project

Copy riffle.css and riffle.js into your project.
Add the markup from index.html (the block between the COMPONENT comments). The grid is four .riffle-tiles, two up and two down.
Start it and connect your own check:

import { init } from './riffle.js';

const riffle = init(document.querySelector('.riffle'), {
  onComplete: async (code) => {
    const res = await fetch('/api/verify', { method: 'POST', body: JSON.stringify({ code }) });
    if (!res.ok) throw new Error('That code has expired. Send a new one.'); // shown under the grid
  },
  onResend: () => fetch('/api/send-code', { method: 'POST' }),
  onContinue: () => { location.href = '/dashboard'; },
});

onComplete runs as soon as the fourth digit is in. Return false or throw to show an error: the tiles start to turn, jam, spring back red and the digits drop out so the user can type again. Resolve and the tiles shuffle — a clockwise turn, a diagonal cross, a row swap, a turn back — then close the gaps into one green square, a check draws across it and a Continue button appears.

There is one real <input> under the tiles, so the things that normally work with a code field still do: paste, SMS and email autofill (autocomplete="one-time-code"), the numeric keyboard on phones, and screen readers.

useEffect(() => {
  const riffle = init(ref.current, { onComplete });
  return () => riffle.destroy();
}, []);

Questions

What exactly do I get?

The full source, an example page and a README. No account, no framework.

Can I use it in client projects?

Yes, in unlimited projects. You can't resell or share the source itself.

Does it check the code?

It calls your function with the code and shows the answer. Checking belongs on your server; the demo only compares against a fixed code.

Can I change the shuffle?

Yes. moves is a list of five named moves (clockwise, anticlockwise, diagonal, columns, rows) in any order and length, and tempo sets the pace.

Does autofill from SMS work?

Yes. It's a normal input with autocomplete="one-time-code", so iOS and Android offer the code from the message, and the digits stamp in one after another.

Is it accessible?

One labelled field, numeric keyboard on phones, live status messages, aria-invalid on errors, and focus moves to Continue once verified. With reduced motion no tile travels.

Light and dark?

Both are designed, and every colour is a CSS variable.

What if it doesn't work for me?

If it doesn't work like the demo, you get a refund within 14 days.

Still have a question? Email us. The person who made it answers.

More like Riffle

All forms

index.html

<!-- eyes before the head:
     they sink behind it -->
<g class="tuck-eye
  tuck-eye--back">
…
<path class="tuck-body" …/>
<!-- the engine finds the
     password by this -->
<input class="tuck-input
  tuck-input--secret" …
  data-mascot="secret" …>

tuck.css

/* hide: stalks shrink to
   their base, the eyes sink
   behind the head */
.tuck[data-mood="hide"]
  .tuck-stalk, …
{ transform: scaleY(0); …
.tuck[data-mood="hide"]
  .tuck-eye--front, …
{ transform:
  translate(4px, 54px); …

mascot.js

// the eyes chase the caret:
// width of the text before
// it, in the input's font
ctx.font = `${cs.fontWeight}
  ${cs.fontSize} …`;
…
// scrolled fields shift the
// text; clamp to the field
x: clamp(left + ctx
  .measureText(text).width
  - input.scrollLeft, …

Tuck

$29

Sign-up, sign-in and reset forms with a snail that pulls its eyes in while you type your password

10.6 KB0 depsForms

index.html

<!-- one real input; js
     draws each piece's
     outline as an svg -->
<div class="dovetail-row">
  <input
    class="dovetail-input"
    …>
  <span
    class="dovetail-piece"
    aria-hidden="true">
  </span>

dovetail.css

/* js sets each slide's
   length; a cut-off one
   resumes where it is */
.dovetail-piece {
  translate: 0 0;
  transition:
    translate
    var(--dovetail-move)
    var(--dovetail-glide), …
.dovetail-piece.is-lifted {
  … scale: 1.06; }

dovetail.js

// tab and socket share
// points: they meet exactly
function outline(s,
  socket, tab) {
  return rounded([
    ...(tab ?
      tabPoints(W, s) : []),
    …
    ...(socket ?
      tabPoints(0, s)
      .reverse() : []),

Dovetail

$12

A one-time code field of puzzle pieces that slide together and lock into a check

11 KB0 depsForms

index.html

<!-- a coal per slot; the
     check has no d, js
     fits it to the row;
     sparks spawn in fx -->
<span class="ember-slot" …>
  <span class="ember-wick">
  </span></span>
…
<svg class="ember-mark" …>
<path class="ember-check"/>
<span class="ember-fx" …>

ember.css

/* two copies of the digit:
   a blurred one behind it
   carries the heat */
.ember-num, .ember-heat {
  grid-area: 1 / 1;
…
.ember-heat {
  color: var(--ember-flame);
  filter: blur(7px);
  opacity: .3; …

ember.js

// one eased k draws the
// stroke and puts the spark
// at its tip, via along(k)
const k = easeInOut(
  Math.min(1, (now - t0)
  / dur));
const [x, y] = along(k);
… p.style.strokeDashoffset
  = String(1 - k);
… c.setAttribute('cx', x);

Ember

$12

A one-time code field where each digit lights like an ember and a wrong code turns to ash

9.3 KB0 depsForms

index.html

<!-- one real input on top;
     the tiles stay empty,
     flap.js adds halves
     and a hinged leaf -->
<div class="flap-row">
  <input class="flap-input"
    id="otp" type="text" …>
  <span class="flap-tile"
    aria-hidden="true">
  </span>
  …

flap.css

/* one leaf, two faces:
   the back waits folded
   behind the front */
.flap-tile {
  perspective: 480px; …
.flap-leaf-front,
.flap-leaf-back {
  backface-visibility:
    hidden; …
  transform:
    rotateX(180deg); }

flap.js

// new glyph: top half and
// leaf back; the old one
// stays on the leaf front
paint(c.top, glyph, tone);
paint(c.back, glyph, tone);
// fall to -180, bounce 5°
// back and settle: clack
const a = c.leaf.animate(
  … 'rotateX(-180deg)',
  offset: 0.86, …
  'rotateX(-175deg)', …

Flap

$12

A split-flap code field that clacks each digit down and flips the board to DONE

7.8 KB0 depsForms

What it does

Use it in your project

Questions

More like Riffle

Tuck

Dovetail

Ember

Flap

Your cart

Saved for later

What it does

Specs

Use it in your project

Questions

More like Riffle

Tuck

Dovetail

Ember

Flap