User Guide For CS-Cart OTP Verification

CS-Cart OTP Verification is an impressive add-on that provides the feature to log in to the store via Contact Number, Email or Whatsapp.

The OTP verifications will also be done during the new customer’s registration and checkout process by sending the code to the customer’s contact number.

This also provides an option to log in via OTP & reset the password via OTP.

This confirms that the returning customer is genuine and the order comes from a genuine customer without doing any manual review on the store.

• Users can verify their identity via OTP sent through phone number, email, or WhatsApp, giving them flexibility in how they complete verification.
• During registration, new users must enter an OTP sent to their mobile number or email to verify their identity and complete the sign-up process.
• When signing in, registered users will receive an OTP on their phone number or email to verify their identity and gain access to their account.
• Users can reset their password by entering an OTP sent to their registered phone number or email, ensuring that the request is legitimate and secure.
• Non-verified users can still proceed with checkout, but OTP verification will be required before they can complete payment or purchase items, ensuring security.
• Admins can set up OTP verification for non-verified users for specific payment methods, helping to reduce the risk of fraud during transactions.
• Admins can customize OTP settings, including expiry times, retry limits, and OTP length, tailoring the process to their business requirements and security needs.
• The add-on allows phone number masking, which hides or partially displays phone numbers for user privacy, helping to protect sensitive contact details.
• OTP verification is added during guest checkout to confirm the customer’s mobile number. This helps ensure the order is placed by a real user.

Note: “Phone” field will be the required field in the customer contact information to process OTP verification.

After downloading the CS-Cart OTP Verification add-on, you’ll get one zip file, one install.txt file, and a relevant User Guide manual doc. Read it carefully for proper configuration.

Go to Manage Add-ons, and click on “Manual Installation” as shown below in the snapshot.

Click on “Local” to browse the zip file, and then click on “Upload & Install” as shown below in the snapshot.

Twilio Auth

Twilio is a communications platform for sending and receiving text messages using its web service APIs.

The admin signs up for Twilio services by visiting the Twilio website and clicking the Sign Up button.

 Here, the admin can fill the required field, as shown in the image below:

Once the user successfully registers on Twilio, Twilio prompts them to fill in a few fields to set up the account.

After creating the account, the user can access the credentials from the Twilio dashboard, as shown in the screenshot below.

Following that, you’ll be able to generate the API key and then copy the details.

How to get Whatsapp credentials?

The admin will have to create a Facebook Meta account. Click on the Create App option as shown in the below snapshot.

Choose the other option and click on the next button to proceed further process.

Now, click on the business option to select an app type to get API credentials.

Here, the admin will enter the app name, and app contact email and click on the Create app button to proceed further.

Now, the admin will click on the Setup option in WhatsApp.

The developer dashboard displays the access token, phone number ID, and business account ID, as shown in the screenshots below.

To configure the module, go to the Add-Ons >> Developers >> Webkul Software Pvt Ltd. >> OTP Verification >> Settings.

Here, you need to configure all the required details based on your specific business needs and preferences to ensure the module functions correctly.

Twilio Settings:

• Uncheck the box for Live Mode.
• Fill in the credentials (Twilio Phone Number, Account Sid, Auth Token) provided by “Twilio” as shown in the snapshot below.

Whatsapp Credentials :

Here, the admin will enter the following details :

• Phone Number Id : The admin will enter the phone number id generated from the Meta Developers account.
• Business Account Id : After that the admin will enter the business account id.
• Access Token :  Now, the store admin will enter the access token.
• Whatsapp template name : Enter the template name.

Send OTP Verification:

• Enable Test Mode: When this option is enabled, the OTP is displayed on the storefront screen.
• OTP Verification Via: Check the box to enable Login via phone number, email and whatsapp.
• Enable OTP during registration: Check the box to enable OTP verification during registration and sign-in.

Note: If you make the contact number field mandatory, it will become a unique identifier.

In cases where multiple users are registered with the same contact number but different email IDs-

Only the account that is verified first will be accessible to the user.

• Enable reset password via OTP: Click to enable the reset password option using either OTP or a reset link.
• Check out for non-verified users: Click to enable checkout for non-verified users.
• OTP Verification for Payment Methods: Select the payment options for which the admin wants OTP verification for non-verified customers.

OTP Settings:

• Save OTP Verification phone number: Make sure to store the phone number on the Order Detail page.
• Maximum number of retries: Set the number of times a user can resend the OTP verification to a single phone number before being required to enter a different number.
• Minutes to expire OTP: Choose how many minutes an OTP verification code remains valid after it’s generated, until the user requests a new OTP code.
• Hours to expire Link: Specify how many hours an OTP verification link remains valid for each newly generated link.
  Note: You can use a maximum of four round brackets.
• OTP Length: Leave this field blank to use the default length of 4, or enter a custom length according to your requirements.

• Enable Expiry Timer: Check the checkbox to display the expiry timer.
• OTP Character Types: Select “All” to include all patterns. By default, the code will be a combination of all patterns.

An admin must keep the “Phone field” as the required field in customer information for OTP verification.

Go to the Settings >> Profile Fields >> Contact Information.

Frontend view

Register an account: New users receive an OTP on their registered mobile number or email to verify and complete registration.

Once the user clicks Register, they will receive an OTP on their registered mobile number or email. They must enter the OTP to verify their account.

Sign in: When a registered user signs in, they must enter their phone number or email to receive an OTP on the corresponding registered mobile number or email address.

Reset Password: Users can reset their password by verifying their identity through an OTP sent to their registered mobile number or email address.

After the user enters their email or phone number and clicks the Reset Password button, the system redirects them to an OTP verification page.

The user must enter the OTP received on their registered email or phone number to verify their identity and reset the password.

The password has been successfully reset, and the user can now use it to sign in to their account

Verification code at the customer’s end: The customer will receive a notification on their registered email address or phone number.

OTP verification on Phone:

OTP verification on Mail:

Phone Number Varification on Guest Checkout:

During guest checkout, the system verifies the customer’s mobile number with an OTP to ensure a real user places the order.

If you have any questions, suggestions, or customization requests, feel free to contact us at support@webkul.com or submit a ticket at webkul.uvdesk.com.

Explore our premium-quality CS Cart Extensions to enhance your store functionality.

You can also explore our CS-Cart Development Services and Quality CS-Cart add-ons.