Authyo | OTP

Menu
Menu
Form integrations

Authyo OTP for Forminator Form

Stop spam and fake leads on your Forminator forms. Add an Authyo shortcode to an HTML field and verify visitors by Email, SMS, WhatsApp or Voice Call before they can submit.

  • WordPress 6.1+
  • PHP 7.4+
  • Requires Forminator
  • Updated
Get the plugin
  1. Install Add Forminator and the Authyo add-on.
  2. Connect Paste your Client ID and Client Secret.
  3. Add a shortcode Paste it into an HTML field in your form.

Note: Voice Call OTP is currently available only in India.

At a glance

What it does
Adds one-time-password (OTP) verification for email addresses and phone numbers to Forminator forms, and saves verified submissions in a Leads screen.
OTP channels
Email, SMS, WhatsApp and Voice Call (Voice Call is available in India only).
How you add it
Paste a shortcode into an HTML field placed below an Email or Phone field in your Forminator form.
Shortcodes
[authyo_forminator_email field="email-1"] and [authyo_forminator_phone field="phone-1"].
You need
Forminator, WordPress 6.1+, PHP 7.4+, and an Authyo account with a Client ID and Client Secret.
Settings location
WordPress admin, under Authyo OTP for Forminator.
Safety net
If your Authyo wallet balance runs out or the API is unavailable, forms keep working without OTP so no leads are lost.

Overview

Authyo OTP for Forminator Form adds a one-time-password check to your Forminator forms. Visitors verify their email address or phone number before the form can be submitted, so only genuine contacts reach your leads list.

You set your Authyo connection and channels once under Authyo OTP for Forminator. Then you switch OTP on for any form by adding an Authyo shortcode to an HTML field. OTP is active automatically on every form that contains one.

This plugin is an independent add-on for Forminator, developed by Konceptwise Digital Media Pvt. Ltd. It is not affiliated with, endorsed by or supported by Forminator.

  • Four OTP channels

    Email, SMS, WhatsApp and Voice Call. Voice Call is currently available in India only.

  • Shortcode setup

    Add OTP to any form with a shortcode in an HTML field. It works with Forminator forms of every kind.

  • Per-form control

    OTP is on only for the forms that contain a shortcode, and you can set a redirect URL for each form.

  • Visitor channel choice

    Let visitors pick SMS, WhatsApp or Voice Call right away, or fall back to another channel after a short wait.

  • Leads Manager

    See every OTP-verified submission in your admin, filter by form, and export to CSV.

  • Country selector

    Show all countries, a selected few, or a single country for region-specific forms.

  • Setup wizard and connection test

    Create a form with OTP ready-made, and test your credentials by sending yourself a real OTP.

  • Fail-safe protection

    If your balance runs out or the API is unavailable, the field is marked verified so real visitors are never blocked.

Requirements

  • WordPress 6.1 or later and PHP 7.4 or later.
  • Forminator installed and activated.
  • An Authyo account with an application. You will need its Client ID and Client Secret.
  • Balance in your Authyo wallet to send OTPs.

Installation

Install Forminator first, then the Authyo add-on.

  1. Install and activate Forminator

    Go to Plugins → Add New, search for Forminator, then click Install Now and Activate. Skip this step if it is already active.

  2. Install Authyo OTP for Forminator Form

    Go to Plugins → Add New, search for Authyo OTP for Forminator Form, then click Install Now and Activate. You can also upload the plugin ZIP using Plugins → Add New → Upload Plugin.

  3. Open the plugin settings

    A new Authyo OTP for Forminator item appears in the WordPress admin menu. The settings page has six tabs: General, Verification Methods, Form Integration, Leads, How to Use and Support.

Setup

Connect the plugin to your Authyo account and choose how OTPs are sent.

  1. Create your Authyo account

    Go to app.authyo.io and create a free account.

  2. Copy your credentials

    Open your applications in the Authyo dashboard and copy the Client ID and Client Secret. Create an application first if you do not have one.

  3. Paste them into the General tab

    In WordPress go to Authyo OTP for Forminator → General. Under API Credentials, enter the Client ID and Client Secret and save. After saving, each field shows Saved. Leave a field blank to keep the saved value.

  4. Test your connection

    Once your keys are saved, use the connection test on the General tab. Enter your own email address, click Send OTP, and type the code you receive. A message confirms that your Authyo credentials are working.

  5. Choose your channels

    Open the Verification Methods tab. Under Enable OTP Channels, switch on Email, SMS, WhatsApp and Voice Call as needed. Choose a Primary Method for phone numbers. Voice Call is available only in India.

You can also use the Form Setup Wizard in the Form Integration tab. It creates a new form with OTP already set up, or adds the OTP fields to an existing Forminator form.

How to use

OTP is added to a form with a shortcode in an HTML field. The plugin hides the linked Email or Phone field automatically and shows its own verification field.

  1. Edit your Forminator form

    Go to Forminator → Forms and open the form. Add a standard Email or Phone field if it does not already have one. Note its field ID, for example email-1 or phone-1.

  2. Add an HTML field

    Add an HTML field directly below the Email or Phone field.

  3. Paste the shortcode for email

    To verify an email address, paste this into the HTML field. Replace email-1 with your real field ID.

    [authyo_forminator_email field="email-1"]

  4. Paste the shortcode for phone

    To verify a phone number by SMS, WhatsApp or Voice Call, paste this instead. Replace phone-1 with your real field ID.

    [authyo_forminator_phone field="phone-1"]

  5. Customize the label and placeholder (optional)

    You can override the default label and placeholder for one form with shortcode attributes.

    [authyo_forminator_email field="email-1" label="Work Email" placeholder="you@company.com"]

    Attributes: field (the Forminator field ID to sync the value into), label, placeholder, and required (yes or no, default no). Default labels and placeholders are set in the Verification Methods tab.

  6. Save and test

    Save and publish the form. OTP is now live on it. Open the form on your site, enter an email address or phone number, request the code, enter it and submit.

Using Google Sheets with Forminator? In your connected sheet, add column headers that match your field IDs (for example email-1). Forminator formats the header on the first submission.

Settings reference

Every setting in the plugin, grouped by the tab where you find it under Authyo OTP for Forminator.

General 3
Client ID
The Client ID of your Authyo application.
Client Secret
The Client Secret of your Authyo application. After saving it shows Saved. Leave it blank to keep the saved value.
Test connection
Sends a real OTP to an email address you enter, to confirm your credentials work.
Verification Methods: channels 4
Enable OTP Channels
Switch on Email, SMS, WhatsApp and Voice Call. Voice Call is available only in India.
Primary Method Default: SMS
The method used first for phone OTPs: SMS, WhatsApp or Voice Call.
Allow visitor to choose method immediately
When on, visitors pick their delivery method straight after entering their number.
Fallback Timer (sec) Default: 30
How long to wait before offering other delivery methods. Allowed range: 15 to 120.
Verification Methods: OTP defaults 4
OTP Length Default: 6
Number of digits in the code. Allowed range: 4 to 8.
Expiry (min) Default: 5
How long a code stays valid. Allowed range: 1 to 10.
Resend Cooldown (sec) Default: 30
How long visitors must wait before requesting another code. Allowed range: 10 to 120.
Max Resends Default: 3
How many times a visitor can request a new code. Allowed range: 1 to 5.
Verification Methods: skip verification 2

Use with caution. These let visitors bypass OTP.

Allow skip for Email verification
Visitors can submit without verifying their email address.
Allow skip for Phone verification
Visitors can submit without verifying their phone number.
Verification Methods: field labels and placeholders 2

Default text for the Authyo shortcode fields. You can override it per form with shortcode attributes.

Email Label / Email Placeholder
The default label and placeholder for the email verification field.
Phone Label / Phone Placeholder
The default label and placeholder for the phone verification field.
Verification Methods: country dropdown 5
All Countries
Show the complete country list, with search.
Selected Only
Show only the countries you choose.
Single Country
Select one country automatically and hide the dropdown.
Default Country
A country preselected when the form loads. Visitors can still change it (not available in Single Country mode).
Country list
The list comes from Authyo and is cached. The page shows how many countries are loaded. Use Refresh or Load Countries to update it.
Form Integration 2
Form Setup Wizard
Create a new form with OTP already configured, or attach the OTP fields to an existing Forminator form.
Redirect URL (optional)
For each form, a page to send visitors to after a successful submission. OTP itself is active automatically on any form that contains an Authyo shortcode.
Leads 5

Every OTP-verified submission, in one place.

Columns
Form, Data, Status, Channel, Date and Actions.
Filter by form
Show leads from one form or from all forms.
Entries per page
Choose how many leads are shown at a time.
Export
Use Export Selected or Export All CSV to download leads.
Delete
Delete one lead, or select several and use Delete Selected.
Shortcode attributes 4
field
The Forminator field ID to sync the verified value into, for example email-1.
label
The label shown above the field. Defaults to the value in the Verification Methods tab.
placeholder
The hint inside the field. Defaults to the value in the Verification Methods tab.
required Default: no
Make the field required: yes or no.

Moving from version 1.0.4 or earlier

Older versions used drag-and-drop Authyo fields in the Forminator builder. These have been replaced by shortcodes.

  1. Remove the old Authyo fields

    Open the form and delete the old Authyo fields.

  2. Add a standard field and an HTML field

    Add a standard Email or Phone field, then an HTML field below it.

  3. Paste the shortcode and save

    Paste the matching Authyo shortcode into the HTML field with your field ID, then save the form.

Troubleshooting

Most problems have a quick fix. Find your issue below.

The shortcode shows as plain text, or nothing appears
Place the shortcode in an HTML field, not in a text or label field. Make sure the plugin is active and that the field value matches the ID of your Email or Phone field exactly (for example email-1).
I see a “Wallet Balance Low” notice in the admin
Your Authyo wallet is low or empty, so OTP verification is currently bypassed and visitors can submit without verifying. Top up your Authyo account, then dismiss the notice using Dismiss (I’ve topped up).
I see a “Credentials Unreadable” notice
Your WordPress authentication keys (the salts in wp-config.php) changed after your credentials were saved, so they can no longer be decrypted. Re-enter your Client ID and Client Secret in the General tab and save.
The OTP does not arrive
Use the connection test on the General tab to confirm your credentials. Check that the channel is switched on in Verification Methods, that your Authyo wallet has balance, and that the email address or phone number is valid. Voice Call works only in India.
Forms submit without asking for an OTP
If your Authyo wallet is empty or the API is unavailable, the plugin lets submissions through so no leads are lost. Check for the wallet notice. Also check whether Allow skip is on for the channel.
Visitors see “Invalid phone number”
The number does not match the selected country. Choose the right country and check the digits.
Visitors see “Session expired. Please resend OTP”
The code timed out. By default a code is valid for 5 minutes. Ask the visitor to resend it, or raise Expiry (min) (up to 10).
Visitors see “Invalid OTP”
The code was wrong. Check the digits and try again, or resend the code.
Visitors see “Too many attempts” or “Too many verification attempts”
The visitor reached the limit for codes. They should wait a few minutes and try again. You can allow more resends with Max Resends (up to 5).
The country list is empty
Open Verification Methods → Country Dropdown Configuration and click Load Countries or Refresh. Check your credentials if it still fails.
Verified entries do not appear in Leads
Leads are saved for forms that contain an Authyo shortcode. Check that the form has the shortcode and that OTP was completed.
My old drag-and-drop Authyo fields stopped working
Newer versions replaced them with shortcodes. Follow “Moving from version 1.0.4 or earlier” above.

Frequently asked questions

Do I need an Authyo account?
Yes. You need an Authyo account to get a Client ID and Client Secret for the plugin settings.
Does it work with all Forminator forms?
Yes. Once Forminator is active, you can add OTP to any form, such as contact, registration, lead capture or booking forms.
Which OTP channels are supported?
Email, SMS, WhatsApp and Voice Call. Voice Call is currently available only in India. You can switch each channel on or off in the Verification Methods tab.
How do I turn OTP on for a form?
Add an Authyo shortcode to an HTML field in the form. OTP is active automatically on any form that contains one.
What happens if my Authyo wallet runs out?
The plugin lets submissions through and marks the field as verified, so genuine visitors are not blocked. This is a deliberate safety feature to prevent lost leads. The admin shows a notice so you can top up.
Can visitors choose how they receive the code?
Yes. Switch on Allow visitor to choose method immediately and visitors can pick SMS, WhatsApp or Voice Call. Otherwise the primary method is used first and other options appear after the fallback timer.
Can I limit the countries?
Yes. Choose Selected Only to show only the countries you pick, or Single Country to preselect one and hide the dropdown.
Where can I see verified submissions?
In the Leads tab. You can filter by form and export to CSV.
Is any user data stored?
OTP data is processed in real time through the Authyo API and is not stored permanently by the plugin. Verified submissions you capture appear in the Leads screen. Your API credentials are stored encrypted.
Is this plugin made by the Forminator team?
No. It is developed by Konceptwise Digital Media Pvt. Ltd. and is not affiliated with, endorsed by or supported by Forminator.

Still need help?

If you couldn’t find the answer in this guide, submit our support form and the Authyo team will get back to you.

Get support