Youform
How to guides

How to verify email in my form?

Updated 3 weeks ago

Email Verification

Ensure respondents provide a real, accessible email address by requiring a one-time verification code (OTP) before they can submit your form.

Overview

When email verification is enabled on an email block, respondents must enter their email address, receive a 6-digit verification code, and enter it correctly before they can proceed. This prevents fake or mistyped email addresses from reaching your submissions.

Email verification is available on the Business plan.

How it works

  1. The respondent enters their email address in the email field.

  2. A Send code button appears below the input.

  3. After clicking, a 6-digit verification code is sent to their email.

  4. The respondent enters the code into the OTP input fields.

  5. Once verified, a green Email verified badge appears and they can continue to the next question.

The verification code expires after 5 minutes. Respondents can request a new code after a 60-second cooldown, up to 3 resend attempts per session.

Enabling email verification

  1. Open your form in the Builder.

  2. Select the Email block you want to verify.

  3. In the right panel, check the Verify email checkbox.

  4. Save/publish your form.

If you are not on the Business plan, the checkbox will be disabled with a note indicating that a Business plan is required.

Note: Email verification is not available for email blocks inside a group (matrix/group block). The toggle will be automatically disabled for grouped email fields.

Custom SMTP sender

By default, verification emails are sent from your system email address. If you have configured SMTP senders in your SMTP Settings, you can choose a specific sender for each email block:

  1. Enable Verify email on the email block.

  2. A Send from dropdown appears below the toggle.

  3. Select your preferred SMTP sender, or leave it as System default.

This lets you send verification emails from your own domain (e.g., [email protected]) for a more branded experience.

Previewing in draft mode

When previewing your form in the builder (draft mode), email verification works in a special preview mode:

  • No actual email is sent.

  • Use the code 000000 (six zeros) to simulate a successful verification.

  • A message will appear: "Preview mode: use code 000000".

This lets you test the full verification flow without sending real emails.

Viewing verified emails in submissions

Verified email addresses are marked with a green checkmark icon in your submissions:

  • Submissions table: A small green check icon appears next to the email address.

  • Submission detail modal: A green Verified badge is displayed next to the email.

This makes it easy to identify which respondents completed the verification step.

Customizing verification labels

You can customize the text shown during the verification flow in your form's Language Settings. The following labels are customizable:

  • Send code button — Default: "Send code"

  • Verify code prompt — Default: "Enter verification code"

  • Resend code button — Default: "Resend code"

  • Verified badge — Default: "Email verified"

  • Verification required error — Default: "Please verify your email address."

To customize these labels:

  1. Go to your form's Settings > Language.

  2. Scroll to the Error & validation messages section.

  3. Edit the email verification messages as needed.

These labels also support multi-language translations if your form uses multiple languages.

Rate limits and security

Email verification includes built-in protections against abuse:

  • Max verification attempts per code: 5

  • Max resend requests per session: 3

  • Code expiration: 5 minutes

  • Cooldown between resends: 60 seconds

  • Rate limit per email address: 5 codes per 15 minutes

  • Rate limit per IP address: 10 codes per hour

  • Rate limit per organization: 200 codes per hour

Verification codes are securely hashed and cannot be retrieved after being generated.

Respondent experience

Entering the code

  • Respondents see 6 individual input boxes for each digit.

  • They can type one digit at a time (the cursor auto-advances) or paste the full code at once.

  • The code is automatically verified once all 6 digits are entered.

Changing email

  • If the respondent needs to change their email after requesting a code, they can click the Change email link to return to the email input.

  • If a respondent navigates away from the email question and comes back, their verification status is preserved — they won't need to re-verify.

Graceful degradation

If your organization is downgraded from the Business plan or email verification becomes unavailable, forms with email verification enabled will gracefully fall back to a standard email input field. Respondents can still enter their email and submit the form — the verification step is simply skipped. No submissions are blocked.

Was this helpful?
Was this helpful?