The increasing prevalence of cybersecurity threats on e-commerce platforms highlights the need for stronger account protection mechanisms, particularly in digital artwork sales applications involving personal data, transactions, and digital product ownership. This study aims to design and develop a web-based digital artwork sales application by implementing Two-Factor Authentication (2FA) using a One-Time Password (OTP) sent via email as an additional authentication layer. The system was developed using the Software Development Life Cycle method, which includes requirements analysis, system design, implementation, and testing. The application was built using the Laravel framework with the Model-View-Controller architecture and a MySQL database. Its main features include user registration and authentication, digital artwork management, product searching, ordering, payment, and digital product downloading. System security was implemented through bcrypt password hashing, SHA-256 hashing to maintain the integrity of selected data, OTP expiration limits, and two-step verification during the login process. Black-box testing was conducted to evaluate the functionality of the system based on predefined usage scenarios. The test results indicate that all major application functions operated according to the specified requirements. The implementation of 2FA provides an additional layer of protection by requiring users to enter an OTP. Therefore, the developed application can support a structured digital artwork sales process while improving user account security without compromising the convenience of digital transactions.