Start a verification
Your application requests the supported verification method for the intended destination. Use the appropriate service configuration and keep the API credential on your server.
Verify possession of a phone number or email address before moving a customer through a sensitive workflow. Give people supported alternatives and keep the check inside your application’s rules.
Verify is a separate usage-based product. Channel availability, sender setup and delivery fees apply.A typed email address or phone number is a claim. A completed verification gives your application evidence that the person can receive a code at that destination.
Your application requests the supported verification method for the intended destination. Use the appropriate service configuration and keep the API credential on your server.
The hosted screen offers text message, voice call and email options. Explain what the code is for and let the person use a supported alternative when one channel is unavailable.
Validate the submitted code through the verification flow. Your application should inspect the verified result before proceeding, rather than trusting a browser message or an unchecked form field.
The right security decision depends on the action. Receiving a code does not make a person the owner of every record with a similar name.
Use verification for the specific session, destination and action you intended. An old result from a different flow should not become a universal pass for future requests.
Sensitive order access may also require matching order details such as an order number and billing postal code. Combine the appropriate checks instead of using an email address alone.
A verified destination does not grant administrative access or permission to read another customer’s information. Your backend must still enforce account ownership and authorization.
Make verification understandable for customers and controllable for the people running the product.
Offer supported text, voice and email verification paths. Configure sender and channel availability before presenting an option to customers.
Use service-level settings for the application’s verification behavior. Keep separate uses understandable so a change for one flow does not surprise another.
Use the supported expiry, retry and fraud-control settings. Handle an invalid or expired code clearly without giving away whether unrelated customer accounts exist.
Inspect the verification outcome and available events. A request to send a code and a successfully completed verification are different states.
Use the REST API and scoped credentials from your server. Check errors and status before allowing the next action, including when a delivery provider is unavailable.
Supported plugin flows can use Verify for customer checks and subscriber confirmation. Configure the specific integration rather than assuming every platform has identical verification support.
Choose the intended use, supported channels and sender identity. Review delivery availability and the workspace’s current usage pricing.
Create the verification from your backend and present a clear code-entry or hosted flow. Keep credentials and authorization decisions off the client.
Try a correct code, an incorrect code, expiry and retry. Confirm that a failed verification cannot accidentally unlock the protected action.
Verify is a separate usage-based product. Channel availability, sender setup and delivery fees apply.