# Authyo OTP for SureForms

> Add email and phone OTP verification to your SureForms forms. Add an Authyo block to your form and verify visitors by Email, SMS, WhatsApp or Voice Call before they can submit.

Source: https://authyo.io/authyo-docs/authyo-otp-for-sureforms/

> Note: Voice Call OTP is currently available only in India.

## At a glance

- **What it does:** Adds one-time-password (OTP) verification for email addresses and phone numbers to SureForms forms, using form blocks, and saves submissions in a Lead Management screen.
- **OTP channels:** Email, SMS, WhatsApp and Voice Call (Voice Call is available in India only).
- **Blocks it adds:** **Authyo Email**, **Authyo Phone** and **Authyo Smart Field** (one field that accepts an email address or a phone number).
- **You need:** SureForms, WordPress 5.5+, PHP 7.4+, and an Authyo account with a Client ID and Client Secret.
- **Settings location:** WordPress admin, under **Authyo OTP** (the page is titled **Authyo OTP For SureForms**).
- **Safety net:** If Authyo is not set up, or your balance runs out, forms keep working without OTP so no leads are lost.
- **Get the plugin:** [WordPress.org: Authyo OTP for SureForms](https://wordpress.org/plugins/authyo-otp-for-sureforms/)

## Overview

**Authyo OTP for SureForms** adds a one-time-password check to your SureForms forms. Visitors verify their email address or phone number before the form can be submitted, which reduces spam and fake submissions.

You add OTP with a form block. In the SureForms editor, add an **Authyo Email**, **Authyo Phone** or **Authyo Smart Field** block to your form, then publish it as usual.

_This plugin is an independent add-on for SureForms, developed by Konceptwise Digital Media Pvt. Ltd. It is not affiliated with, endorsed by or supported by SureForms._

- **Three Authyo blocks:** Verify an email address, a phone number, or let the visitor enter either one in a single smart field.
- **Four OTP channels:** Email, SMS, WhatsApp and Voice Call. Voice Call is currently available in India only.
- **Fallback methods:** If the code does not arrive, visitors can try another way after a short wait. You can also show every channel as a button from the start.
- **Multi-page forms:** Optionally stop visitors from moving to the next page until the Authyo fields on the current page are verified.
- **Lead Management:** See every submission captured by OTP, set its status, filter, search and export to CSV.
- **Country selector:** Choose all countries or only the ones you serve.
- **Setup popup:** A guided popup takes you from credentials to a form embedded on a page.
- **Fail-safe protection:** If Authyo is not configured or your balance is used up, submissions continue without OTP, so no leads are lost.

## Requirements

- WordPress **5.5** or later and PHP **7.4** or later.
- **SureForms** installed and activated. The plugin shows a “SureForms Plugin Required” notice with an install button if it is missing.
- An **Authyo account** with an application. You will need its **Client ID** and **Client Secret**.
- Balance in your Authyo wallet to send OTPs.

## Installation

Install SureForms first, then the Authyo add-on.

### Step 1: Install and activate SureForms
Go to **Plugins → Add New**, search for **SureForms**, then click **Install Now** and **Activate**. Skip this step if it is already active.

### Step 2: Install Authyo OTP for SureForms
Go to **Plugins → Add New**, search for **Authyo OTP for SureForms**, then click **Install Now** and **Activate**. You can also upload the plugin ZIP using **Plugins → Add New → Upload Plugin**.

### Step 3: Open the plugin settings
A new **Authyo OTP** item appears in the WordPress admin menu. The settings page has five tabs: **General**, **Verification Methods**, **How to Use**, **Support** and **Lead Management**.

## Setup

Connect the plugin to your Authyo account and choose how OTPs are sent. You can use the setup popup, which has six steps (Credentials, Channels, Countries, OTP Behaviour, Form Setup and Embed on Page), or fill in the tabs yourself.

### Step 1: Create your Authyo account
Go to [app.authyo.io](https://app.authyo.io/account/welcome) and create a free account.

### Step 2: Copy your credentials
Open [your applications](https://app.authyo.io/application/userapplication) in the Authyo dashboard and copy the **Client ID** and **Client Secret**. Create an application first if you do not have one.

### Step 3: Paste them into the General tab
In WordPress go to **Authyo OTP → General**. Under **API Credentials**, enter the **Client ID** and **Client Secret**, then click **Save Changes**. Use the eye icon to show or hide the secret.

_**Failsafe:** if your Authyo wallet balance runs out, the plugin automatically bypasses OTP verification so your forms keep working and visitors are not blocked._

### Step 4: Choose your verification channels
Under **Verification Channels**, switch on **Email**, **SMS**, **WhatsApp** and **Voice Call**. At least one is required. Pick a **Primary Channel (Phone)**. Voice Call is currently available only for India.

### Step 5: Set the country list (optional)
Under **Country Selection**, choose **Select All Countries** or **Select Specific Countries**.

## How to use

OTP is added with a form block, not a shortcode.

### Step 1: Create or edit a form
Go to **SureForms → Add New**, or open an existing form.

### Step 2: Add an Authyo block
In the form editor, add the **Authyo Email** block to verify an email address, the **Authyo Phone** block to verify a phone number, or the **Authyo Smart Field** block for a single field that accepts an email address or a phone number.

### Step 3: Publish and embed the form
Publish the form and embed it on a page with the SureForms block or shortcode. The setup popup can also create a page and add the shortcode for you.

### Step 4: Test the form
Open the page, enter an email address or phone number, click **Send OTP**, enter the code you receive and submit. If a visitor submits without verifying, they see “Please send and verify the OTP to continue”.

_The plugin’s own How to Use tab also says the OTP interface is added to SureForms’ standard Email and Phone blocks while the plugin is active. For predictable results, use the Authyo blocks, which are built for OTP._

## Settings reference

Every setting in the plugin, grouped by the tab where you find it under **Authyo OTP**.

### General: API credentials

- **Client ID**: The Client ID of your Authyo application.
- **Client Secret**: The Client Secret of your Authyo application. Use the eye icon to show or hide it.

### General: verification channels

- **Email, SMS, WhatsApp, Voice Call**: Switch on the channels you want to offer. Voice Call is currently available only for India.
- **Primary Channel (Phone)**: The channel used first for phone numbers: SMS, WhatsApp or Voice Call. Fallback options appear after 1 minute.
- **Allow visitor to choose method**: When on, visitors see a button for each enabled channel (SMS, WhatsApp, Voice) straight away, instead of a single “Send OTP” button.
- **Strict Validation (Multi-page Forms)**: When on, visitors cannot move to the next page of a multi-step form until the Authyo fields on the current page are verified.
- **Allow skipping email verification**: Visitors can submit the form without completing email OTP verification.
- **Allow skipping phone verification**: Visitors can submit the form without completing phone OTP verification.

### General: country selection

- **Select All Countries / Select Specific Countries**: Show every country in the phone field dropdown, or only the ones you choose. Search to find a country.
- **Country List Cache**: The country list is cached for speed. Use **Refresh Cache** to fetch the latest list. If it fails to load, check your API credentials.

### Verification Methods: OTP defaults

- **OTP Length** (Default: 6): Number of digits in the code. Allowed range: 4 to 8.
- **Expiry (minutes)** (Default: 5): How long a code stays valid. Allowed range: 1 to 10.
- **Resend Cooldown (seconds)**: How long visitors must wait before requesting another code. Allowed range: 10 to 120.
- **Max Resends** (Default: 3): How many times a visitor can request a new code. Allowed range: 1 to 5.

### Form blocks (in the SureForms editor)

- **Authyo Email**: A SureForms email field with Authyo OTP verification.
- **Authyo Phone**: A SureForms phone field with Authyo OTP verification by SMS, WhatsApp or Voice Call, and a country selector.
- **Authyo Smart Field**: A universal field for email or phone verification. The visitor enters either an email address or a mobile number.

### Lead Management

- **Status**: Each lead can be **New**, **Contacted**, **In Progress**, **Completed** or **Trash**.
- **Search and filter**: Search leads and filter by status.
- **Columns**: ID, Date, Form Title, Lead Details, OTP Status, Channel and Actions.
- **Export CSV**: Download leads for offline use.
- **Delete**: Select leads and use **Delete Selected**.

## Troubleshooting

### I see “SureForms Plugin Required”
The add-on needs SureForms. Click **Install SureForms**, or install and activate it from **Plugins → Add New**, then return to the settings.

### I do not see the Authyo blocks in the form editor
Check that SureForms and the Authyo plugin are both active, then reload the form editor and search the block list for “Authyo”.

### The OTP does not arrive
Check that your **Client ID** and **Client Secret** are correct, that your Authyo wallet has balance, that the channel is switched on under **Verification Channels**, and that the email address or phone number is valid. Voice Call works only for India.

### The form submits without asking for an OTP
If Authyo is not configured, or your Authyo wallet balance is empty, the plugin skips OTP so forms keep working. Check your credentials and top up your Authyo wallet. Also check whether skipping is allowed for the channel.

### Visitors see “Please send and verify the OTP to continue” or “Please enter the OTP to continue”
The visitor must request the code and enter it before submitting. If you would rather let them skip, switch on **Allow skipping email verification** or **Allow skipping phone verification**.

### Visitors see “Invalid OTP”
The code was wrong. Check the digits and try again, or request a new code.

### Visitors see “Invalid email address” or “Invalid mobile number”
The contact detail is not in a valid format. For phone numbers, choose the right country and check the digits.

### Visitors see “Voice Call is not available in the selected country”
Voice Call works only for India. Ask the visitor to choose SMS or WhatsApp, or switch off Voice Call under **Verification Channels**.

### A multi-page form will not move to the next page
**Strict Validation (Multi-page Forms)** is on, so the Authyo fields on the current page must be verified first. Verify the code, or switch the option off.

### The code expired
By default a code is valid for 5 minutes. Ask the visitor to request a new one, or raise **Expiry (minutes)** (up to 10).

### The country list is empty
Check your credentials, then open **General → Country Selection** and click **Refresh Cache**.

## Frequently asked questions

### Does this plugin require SureForms?
Yes. It is an extension for SureForms and needs it installed and activated.

### Which OTP methods are supported?
Email, SMS, WhatsApp and Voice Call. Voice Call is currently available only for India.

### Is an Authyo account required?
Yes. You need an Authyo account and an application to get your Client ID and Client Secret.

### How do I add OTP to a form?
Add an **Authyo Email**, **Authyo Phone** or **Authyo Smart Field** block to the form in the SureForms editor.

### What is the Authyo Smart Field?
A single field that accepts either an email address or a mobile number, and sends the code to the right place.

### What happens if my Authyo balance runs out?
The plugin lets submissions through without OTP, so genuine visitors are not blocked and you do not lose leads. Top up your Authyo wallet to turn verification back on.

### Does it work with multi-page forms?
Yes. With **Strict Validation (Multi-page Forms)** on, visitors must verify the Authyo fields on a page before moving on.

### Where can I see the submissions?
In **Authyo OTP → Lead Management**. You can search, filter by status, and export to CSV.

### Is this plugin made by the SureForms team?
No. It is developed by Konceptwise Digital Media Pvt. Ltd. and is not affiliated with, endorsed by or supported by SureForms.

## Support

If this guide does not answer your question, submit the support form: https://authyo.io/support/