Authyo | OTP

Menu
Menu
Form integrations

Authyo OTP for Easy Form Builder

Add OTP verification to Easy Form Builder forms with no extra fields. A Send OTP button appears beside the native Email and Phone fields, and visitors verify by Email, SMS, WhatsApp or Voice Call.

  • WordPress 6.5+
  • PHP 7.4+
  • Requires Easy Form Builder
  • Updated
Get the plugin
  1. Install Add Easy Form Builder and the Authyo add-on.
  2. Connect Paste your Client ID and Client Secret.
  3. Build a form Add a native Email or Phone field.

Note: Voice Call OTP is currently available only in India.

At a glance

What it does
Adds one-time-password (OTP) verification to the native Email and Phone fields of Easy Form Builder forms. No extra widget or shortcode is needed.
OTP channels
Email, SMS, WhatsApp and Voice Call (Voice Call works only on Indian phone numbers).
How it works
Once your Authyo keys are saved, every form with a native Email or Phone field is protected automatically. You switch OTP off for individual forms in the Forms tab.
You need
Easy Form Builder, WordPress 6.5+, PHP 7.4+, and an Authyo account with a Client ID and Client Secret.
Settings location
WordPress admin, under Authyo OTP for Easy Form Builder.
Before you connect
The plugin does nothing until you save valid credentials. Your forms keep submitting as before.
Safety net
If your Authyo wallet balance runs out, the field is marked verified so visitors can still submit, and the site admin is emailed (at most once an hour).

Overview

Authyo OTP for Easy Form Builder adds a one-time-password check to your Easy Form Builder forms. As soon as a visitor types a valid email address or phone number into a form field, an OTP panel with a Send OTP button appears under it. The visitor enters the code they receive, and only then can they submit the form.

You do not add any special field. Build your form as usual with the native Email and Phone fields. Once your Authyo keys are saved, every matching form is protected. If a form does not need OTP, switch it off in the Forms tab.

Authyo is an official partner of Easy Form Builder by WhiteStudio. This integration is developed and supported by Authyo (Konceptwise Digital Media Pvt. Ltd.) in partnership with WhiteStudio.

  • No extra fields

    The plugin enhances the Email and Phone fields your form already has. Nothing to drag in and no shortcodes.

  • Automatic, with per-form control

    Every matching form uses OTP by default. Switch it off for any form in the Forms tab, for example while testing.

  • Four OTP channels

    Email, SMS, WhatsApp and Voice Call. Voice Call currently works only on Indian phone numbers.

  • Visitor channel choice

    Let visitors pick SMS, WhatsApp or Voice right on the form, with a fallback if the code does not arrive.

  • Guided tour and checklist

    A step-by-step tour and a setup checklist show what is done and what is left.

  • Country selector

    A country selector next to phone fields. Show all countries, a selected group or a single country.

  • Server-side check

    Verification is enforced on the server, so turning off JavaScript does not bypass it.

  • Fail-safe protection

    If your balance runs out, forms keep working and the admin is emailed, so you do not lose leads.

Requirements

  • WordPress 6.5 or later and PHP 7.4 or later.
  • Easy Form Builder installed and activated.
  • An Authyo account with an application. You will need its Client ID and Client Secret.
  • Balance in your Authyo wallet to send OTPs.

Installation

Install Easy Form Builder first, then the Authyo add-on.

  1. Install and activate Easy Form Builder

    Go to Plugins → Add New, search for Easy Form Builder, then click Install Now and Activate. Skip this step if it is already active.

  2. Install Authyo OTP for Easy Form Builder

    Go to Plugins → Add New, search for Authyo OTP for Easy Form Builder, then click Install Now and Activate. You can also upload the plugin ZIP using Plugins → Add New → Upload Plugin.

  3. Open the plugin settings

    A new Authyo OTP for Easy Form Builder item appears in the WordPress admin menu. The settings page has four tabs: General, Verification Methods, Forms and How to Use. A guided tour starts to walk you through setup. You can close it at any time and restart it with Take the tour.

Setup

Connect the plugin to your Authyo account and choose how OTPs are sent. A setup checklist on the General tab shows what is done and what is left.

  1. Create your Authyo account

    On the General tab, click Create Your Free Authyo Account. It opens the Authyo sign-up page. You can also go to app.authyo.io yourself.

  2. Copy your credentials

    Open your applications in the Authyo dashboard and copy the Client ID and Client Secret. Create an application first if you do not have one.

  3. Paste them into the General tab

    Under API Credentials, enter the Client ID and Client Secret, then save. After saving, each field shows Saved. Leave a field blank to keep the saved value.

    Until you save valid credentials, the plugin is completely dormant. It adds nothing to your pages, calls no external service, and every form submits exactly as before.

  4. Choose your channels

    Open the Verification Methods tab. Under Enable OTP Channels, switch on Email, SMS, WhatsApp and Voice Call as needed. Email is on by default and the others are off. Voice Call currently works only on Indian phone numbers.

  5. Adjust the OTP options (optional)

    Under OTP Defaults, set the code length, expiry, resend cooldown and resend limit. Under Phone OTP Settings, set the Primary Method and the Fallback Timer. Under Country Dropdown Configuration, choose which countries to show.

How to use

There is no extra step in the form builder. Once your keys are saved and a channel is on, OTP appears on its own.

  1. Build your form as usual

    In Easy Form Builder, add a native Email and/or Phone field to your form, then save it. If you like, rename the field’s label to something like “Authyo Verified Email” so it reads as a verification field in the builder.

  2. View the form on your site

    Open the page that holds the form. As soon as a visitor types a valid email address or phone number, an OTP panel with a Send OTP button appears under the field.

  3. The visitor verifies

    The visitor clicks Send OTP, receives a code, types it in and clicks Verify OTP. The field then shows Email verified or Phone verified. Only then can the form be submitted, unless you allowed skipping for that channel.

  4. Switch OTP off for a form (optional)

    Open the Forms tab. Every Easy Form Builder form is listed with an on/off switch. Switch a form off while you are building or testing it, or if it does not need verification. This does not affect your other forms or your channel settings.

Using a page cache? Pages with an Easy Form Builder form are excluded from caching automatically while OTP is active. If you turn OTP on for a form, or enable a channel, after a page was already cached, clear your cache once.

Settings reference

Every setting in the plugin, grouped by the tab where you find it under Authyo OTP for Easy Form Builder.

General: API credentials 3
Client ID
The Client ID of your Authyo application.
Client Secret
The Client Secret of your Authyo application. After saving it shows Saved. Leave it blank to keep the saved value. Credentials are stored encrypted.
Remove saved keys
Deletes your Client ID and Client Secret and clears the downloaded country list. OTP then switches off on all forms until you add new keys. Your other settings are kept.
Verification Methods: channels 1
Enable OTP Channels Default: Email on, others off
Switch on Email, SMS, WhatsApp and Voice Call. Voice Call currently works only on Indian phone numbers.
Verification Methods: OTP defaults 4
OTP Length Default: 6
Number of digits in the code. Allowed range: 4 to 8.
Expiry (min) Default: 5
How long a code stays valid. Allowed range: 1 to 10.
Resend Cooldown (sec) Default: 30
How long visitors must wait before requesting another code. Allowed range: 10 to 120.
Max Resends Default: 3
How many times a visitor can request a new code. Allowed range: 1 to 5.
Verification Methods: phone OTP 3
Primary Method Default: SMS
The method used first for phone numbers: SMS, WhatsApp or Voice Call.
Fallback Timer (sec) Default: 30
How long to wait before offering other methods. Allowed range: 15 to 120.
Allow visitor to choose method immediately Default: Off
When on, visitors pick SMS, WhatsApp or Voice Call right after entering their number.
Verification Methods: skip verification 2

Use with caution. When on, a Skip Verification button is shown on that channel’s OTP panel and visitors can submit without verifying.

Allow skip for Email verification
Let visitors skip email verification.
Allow skip for Phone verification
Let visitors skip phone verification.
Verification Methods: country dropdown 4
Country display mode Default: All countries
All countries, Selected countries only or Single country (the dropdown is hidden).
Selected countries / Single country
Choose which countries to show, or the one country to use.
Default country
The country preselected when the page loads. Visitors can still change it.
Refresh
The list of countries is downloaded from Authyo when you save your credentials and refreshed automatically once a week. Click Refresh to update it now.
Forms 1
OTP Verification (per form) Default: On
An on/off switch for every Easy Form Builder form. Forms are on by default until you switch one off.

Security and privacy

How the plugin keeps verification safe, and what it stores.

  1. Server-side check

    The plugin checks verification on the server when the form is submitted, so it is not bypassed by turning off JavaScript. For email fields it also checks that the address submitted is the one that was verified.

  2. Short-lived hashes only

    To rate-limit requests and match a verification to a submission, the plugin keeps salted, non-reversible hashes of the visitor’s IP address and of the verified value, for at most 30 minutes. Email addresses and phone numbers are sent to Authyo only to deliver and check the code, and are not saved by this plugin. Form submissions are stored by Easy Form Builder as before.

  3. Privacy policy text

    The plugin adds a suggested paragraph to Settings → Privacy → Policy Guide that you can use in your site’s privacy policy.

  4. Behind a proxy or CDN

    Rate limits are tracked per visitor using the IP address WordPress sees. If your host does not pass on the real visitor IP, every visitor looks the same. A developer can return the real address with the authyo_efb_remote_ip filter.

Troubleshooting

Most problems have a quick fix. Find your issue below.

Nothing happens on my forms
The plugin is dormant until you save valid credentials. Open the General tab, enter your Client ID and Client Secret and save. Then check that at least one channel is switched on in Verification Methods.
I see “Setup incomplete — add your Authyo API credentials”
Go to the General tab and add your Client ID and Client Secret.
I see a warning that my saved keys cannot be read
The WordPress security salts in wp-config.php were changed after your keys were saved, so the keys can no longer be decrypted. Forms keep working without OTP. Re-enter your Client ID and Client Secret and save.
The OTP panel does not appear under the field
Check that the form has a native Email or Phone field, that OTP is switched on for that form in the Forms tab, and that the matching channel is enabled. The panel appears once the visitor types a valid email address or phone number. Clear your page cache once if the page was cached before you turned OTP on.
The OTP does not arrive
Check your credentials, that the channel is switched on, that your Authyo wallet has balance, and that the email address or phone number is valid. Voice Call works only on Indian phone numbers.
Visitors see “Please verify your email address before submitting this form” or “Please verify your phone number…”
The visitor tried to submit before verifying. They need to request the code, enter it and then submit. Or switch on the skip option for that channel.
The form is submitted without OTP when my balance is empty
This is the safety net. If Authyo reports that your wallet balance is exhausted, the field is marked verified so visitors can still submit, and the site admin is emailed at most once an hour. Click Add credits in the admin notice to top up.
Visitors see an error and cannot submit
If the Authyo service cannot be reached at all, the visitor sees an error and can try again. The form is not submitted unverified in that case. Check your internet connection and the Authyo status.
Many visitors see “Too many attempts”
Your site may be behind a proxy or CDN that hides real IP addresses, so all visitors share one limit. Ask your host to pass on the real IP, or return it with the authyo_efb_remote_ip filter.
I see an admin notice after updating Easy Form Builder
The server-side check depends on Easy Form Builder’s submission endpoint. If an update changes it, the plugin shows a notice and lets submissions through, so genuine leads are never lost, until the Authyo plugin is updated. Update the plugin.
The country list is empty
It is downloaded when you save your credentials. Open Verification Methods → Country Dropdown Configuration and click Refresh.
I want to test a form without sending real OTPs
Switch the form off in the Forms tab while you test, then switch it on again to go live.

Frequently asked questions

Do I need an Authyo account?
Yes. You need a free Authyo account and a Client ID and Client Secret to send OTPs.
Do I need to add a special field to my form?
No. The plugin works with the standard Email and Phone fields in Easy Form Builder. Build your form as usual.
When does OTP verification start?
Only after you save valid Authyo credentials. Until then the plugin is dormant and your forms submit as before. The same applies if the saved credentials can no longer be read.
Can I turn OTP off for one form?
Yes. The Forms tab lists every form with an on/off switch. Forms are on by default.
What happens if my Authyo balance runs out?
When Authyo reports an exhausted balance, the field is marked verified so genuine visitors can still submit, and the site admin gets an email at most once an hour. If Authyo cannot be reached at all, the visitor sees an error and can retry. The form is not submitted unverified.
Can visitors choose how they receive the code?
Yes. Switch on Allow visitor to choose method immediately and visitors can pick SMS, WhatsApp or Voice Call.
Does it support international phone numbers?
Yes. A country selector is added next to phone fields, using the list of countries Authyo supports. You can show all countries, a filtered selection or a single country.
Does it work with a caching plugin?
Yes. Pages with an Easy Form Builder form are marked as not cacheable while OTP is active. If you turn OTP on after a page was cached, clear your cache once.
Does the plugin store my visitors’ personal data?
No. Email addresses and phone numbers are sent to Authyo only to deliver and check the code. On your site it keeps only short-lived (30 minutes at most), salted, non-reversible hashes. Submissions are stored by Easy Form Builder as before.
Can I remove my saved keys?
Yes. On the General tab, under API Credentials, click Remove saved keys and confirm. OTP switches off on all forms until you add new keys.
Is this plugin affiliated with Easy Form Builder?
Yes. Authyo is an official partner of Easy Form Builder by WhiteStudio, and this is the partner OTP integration.

Still need help?

If you couldn’t find the answer in this guide, submit our support form and the Authyo team will get back to you.

Get support