Admin walkthrough — configure

Open Settings → Modules → OTP Verification → Configure → Open settings page. The page has these cards:

Verification flows. One row per flow (Passwordless login, Signup phone verification, Checkout / generic verification), each with an Enabled switch and Allowed channels (Email, SMS, WhatsApp). Leave all channels unticked to allow any ready channel.

Code parameters (apply to every flow):

• Code length (digits) — 4 to 10, default 6.
• Validity (seconds) — default 600 (10 minutes), at least 30.
• Resend window (seconds) and Max sends per window — by default, 3 codes per 10 minutes.
• Max verify attempts — wrong tries per code, default 5.

Signup & change verification:

• Verify at signup — None / Email / Phone / Email + Phone.
• Verify on change — Off / Email / Phone / Email + Phone.

Gating:

• Require verification before checkout.

Mobile code delivery (SMS and WhatsApp):

• Delivery order — which provider is tried first. If a message fails or isn't delivered in time, the same code goes out on the next route. Add route, move routes up or down, or Use the default order.
• Each route shows Ready, or why it isn't (no provider, no approved template, DLT template id missing).
• Timing and limits — when to switch route, how long a mobile code is valid, when resend is allowed, resends of the same code, codes per phone and per network address per hour.
• Countries that can receive codes — numbers from other countries are refused. For an India-only store, choose India.

Click Save. Changes apply to the next code requested.