Ensure respondents provide a real, accessible email address by requiring a one-time verification code (OTP) before they can submit your form.
Overview
When email verification is enabled on an email block, respondents must enter their email address, receive a 6-digit verification code, and enter it correctly before they can proceed. This prevents fake or mistyped email addresses from reaching your submissions.
Email verification is available on the Business plan.
How it works
The respondent enters their email address in the email field.
A Send code button appears below the input.
After clicking, a 6-digit verification code is sent to their email.
The respondent enters the code into the OTP input fields.
Once verified, a green Email verified badge appears and they can continue to the next question.
The verification code expires after 5 minutes. Respondents can request a new code after a 60-second cooldown, up to 3 resend attempts per session.
Enabling email verification
Open your form in the Builder.
Select the Email block you want to verify.
In the right panel, check the Verify email checkbox.
Save/publish your form.
If you are not on the Business plan, the checkbox will be disabled with a note indicating that a Business plan is required.
Note: Email verification is not available for email blocks inside a group (matrix/group block). The toggle will be automatically disabled for grouped email fields.
Custom SMTP sender
By default, verification emails are sent from your system email address. If you have configured SMTP senders in your SMTP Settings, you can choose a specific sender for each email block:
Enable Verify email on the email block.
A Send from dropdown appears below the toggle.
Select your preferred SMTP sender, or leave it as System default.
This lets you send verification emails from your own domain (e.g., verify@yourdomain.com) for a more branded experience.
Previewing in draft mode
When previewing your form in the builder (draft mode), email verification works in a special preview mode:
No actual email is sent.
Use the code 000000 (six zeros) to simulate a successful verification.
A message will appear: "Preview mode: use code 000000".
This lets you test the full verification flow without sending real emails.
Viewing verified emails in submissions
Verified email addresses are marked with a green checkmark icon in your submissions:
Submissions table: A small green check icon appears next to the email address.
Submission detail modal: A green Verified badge is displayed next to the email.
This makes it easy to identify which respondents completed the verification step.
Customizing verification labels
You can customize the text shown during the verification flow in your form's Language Settings. The following labels are customizable:
Verification required error — Default: "Please verify your email address."
To customize these labels:
Go to your form's Settings > Language.
Scroll to the Error & validation messages section.
Edit the email verification messages as needed.
These labels also support multi-language translations if your form uses multiple languages.
Rate limits and security
Email verification includes built-in protections against abuse:
Max verification attempts per code: 5
Max resend requests per session: 3
Code expiration: 5 minutes
Cooldown between resends: 60 seconds
Rate limit per email address: 5 codes per 15 minutes
Rate limit per IP address: 10 codes per hour
Rate limit per organization: 200 codes per hour
Verification codes are securely hashed and cannot be retrieved after being generated.
Respondent experience
Entering the code
Respondents see 6 individual input boxes for each digit.
They can type one digit at a time (the cursor auto-advances) or paste the full code at once.
The code is automatically verified once all 6 digits are entered.
Changing email
If the respondent needs to change their email after requesting a code, they can click the Change email link to return to the email input.
Navigation
If a respondent navigates away from the email question and comes back, their verification status is preserved — they won't need to re-verify.
Graceful degradation
If your organization is downgraded from the Business plan or email verification becomes unavailable, forms with email verification enabled will gracefully fall back to a standard email input field. Respondents can still enter their email and submit the form — the verification step is simply skipped. No submissions are blocked.