Authyo OTP for Elementor Form

Description

Authyo OTP for Elementor Form adds OTP (One-Time Password) verification to your Elementor forms. Protect your forms with multi-channel verification – Email, SMS, WhatsApp, and Voice Call – powered by the Authyo API.

Features:

• 11 field types: First Name, Last Name, Email, Phone, Message, Dropdown, Checkbox, Radio Button, File Upload, Hidden Field, Multi-Step Form
• Enable OTP toggle on Email and Phone fields individually
• Multi-channel OTP delivery: Email, SMS, WhatsApp, Voice Call
• Configurable OTP length (4–8 digits), expiry (1–60 minutes), resend cooldown, and max resend limit
• Failsafe protection: allow forms to submit even if OTP delivery fails (e.g. low balance)
• Built-in country code selector with 250+ countries via the Authyo API, with a bundled static fallback
• Clean, modern settings panel with vertical tab layout
• Rate limiting on send and verify endpoints to prevent abuse
• Full WordPress REST API integration with nonce verification

Third-Party Disclaimer:

This plugin is NOT affiliated with, endorsed by, or officially supported by Elementor Ltd. It is an independent third-party integration that works alongside Elementor to provide OTP verification functionality using Authyo’s API services.

External Services

This plugin connects to the Authyo API (https://app.authyo.io) for the following purposes:

• Send OTP – POST https://app.authyo.io/api/v1/auth/sendotp
  Sends a one-time password to the user’s phone number or email address via the selected channel (SMS, WhatsApp, Voice Call, or Email). The user’s contact target, OTP length, expiry, and delivery channel are transmitted.

• Verify OTP – POST https://app.authyo.io/api/v1/auth/verifyotp
  Verifies the OTP entered by the user against a temporary maskId issued during the send step. No contact information is sent during verification.

• Country list – GET https://app.authyo.io/api/v1/user/getcountrylist
  Fetches the list of supported countries for the phone number field dropdown. This is called once and cached; no user data is transmitted.

• Support request – POST https://app.authyo.io/api/v1/user/WordpressWebhook
  Sent only when a site administrator submits the form on the Support tab, and never as a result of visitor activity. Transmits the message and reply-to address entered on that form, together with your Authyo Client ID, site URL, plugin version, WordPress version and PHP version, so the support team can identify the account and environment. The form states this before it is submitted.

These requests are made from your WordPress server (server-side), not from the user’s browser. Use of these services is subject to the Authyo Terms of Service and Privacy Policy.

Privacy Policy

This plugin transmits personal data to the Authyo API (https://app.authyo.io) in order to deliver and verify one-time passwords. The following data may be sent:

• Phone number or email address – transmitted when a user requests an OTP, to identify the delivery target.
• OTP session token (maskId) – a temporary, opaque identifier returned by the Authyo API and used only to verify the code the user enters. No contact information is included in the verify request.
• Country list requests – no personal data is transmitted; only a request for supported country codes is made.
• Support requests – when an administrator uses the Support tab, the message and reply-to address they type, plus the site URL, Authyo Client ID and version details, are sent to Authyo. This is an explicit administrator action; no visitor data is involved and nothing is sent otherwise.

No personal data collected through this plugin is stored on the Authyo servers beyond what is necessary to deliver and verify a single OTP session.

Site administrators are responsible for informing their users about this data transmission in their own site privacy policy.

For full details, refer to the Authyo Privacy Policy and Terms of Service.

About

Konceptwise Digital Media Pvt. Ltd. is the parent company that officially develops and maintains this plugin.

Authyo is a product line developed and owned by Konceptwise Digital Media Pvt. Ltd., providing multi-channel OTP verification services (Email, SMS, WhatsApp, and Voice Call) for web applications.

This plugin is NOT affiliated with, endorsed by, or officially supported by Elementor Ltd. It is an independent third-party integration.