Title: Authyo OTP for Elementor Form Author: Konceptwise Digital Media Pvt Ltd Published: August 21, 2026 Last modified: August 21, 2026 --- Search plugins ![](https://ps.w.org/authyo-otp-for-elementor-form/assets/banner-772x250.png?rev =3658600) ![](https://ps.w.org/authyo-otp-for-elementor-form/assets/icon-256x256.png?rev=3658126) # Authyo OTP for Elementor Form By [Konceptwise Digital Media Pvt Ltd](https://profiles.wordpress.org/konceptwise/) [Download](https://downloads.wordpress.org/plugin/authyo-otp-for-elementor-form.1.0.1.zip) * [Details](https://wordpress.org/plugins/authyo-otp-for-elementor-form/#description) * [Reviews](https://wordpress.org/plugins/authyo-otp-for-elementor-form/#reviews) * [Installation](https://wordpress.org/plugins/authyo-otp-for-elementor-form/#installation) * [Development](https://wordpress.org/plugins/authyo-otp-for-elementor-form/#developers) [Support](https://wordpress.org/support/plugin/authyo-otp-for-elementor-form/) ## Description Authyo OTP for Elementor Form adds OTP (One-Time Password) verification to your Elementor forms. Protect your forms with multi-channel verification — Email, SMS, WhatsApp, and Voice Call — powered by the Authyo API. **Features:** * 11 field types: First Name, Last Name, Email, Phone, Message, Dropdown, Checkbox, Radio Button, File Upload, Hidden Field, Multi-Step Form * Enable OTP toggle on Email and Phone fields individually * Multi-channel OTP delivery: Email, SMS, WhatsApp, Voice Call * Configurable OTP length (4–8 digits), expiry (1–60 minutes), resend cooldown, and max resend limit * Failsafe protection: allow forms to submit even if OTP delivery fails (e.g. low balance) * Built-in country code selector with 250+ countries via the Authyo API, with a bundled static fallback * Clean, modern settings panel with vertical tab layout * Rate limiting on send and verify endpoints to prevent abuse * Full WordPress REST API integration with nonce verification **Third-Party Disclaimer:** This plugin is NOT affiliated with, endorsed by, or officially supported by Elementor Ltd. It is an independent third-party integration that works alongside Elementor to provide OTP verification functionality using Authyo’s API services. ### External Services This plugin connects to the Authyo API (`https://app.authyo.io`) for the following purposes: * **Send OTP** — `POST https://app.authyo.io/api/v1/auth/sendotp` Sends a one- time password to the user’s phone number or email address via the selected channel( SMS, WhatsApp, Voice Call, or Email). The user’s contact target, OTP length, expiry, and delivery channel are transmitted. * **Verify OTP** — `POST https://app.authyo.io/api/v1/auth/verifyotp` Verifies the OTP entered by the user against a temporary maskId issued during the send step. No contact information is sent during verification. * **Country list** — `GET https://app.authyo.io/api/v1/user/getcountrylist` Fetches the list of supported countries for the phone number field dropdown. This is called once and cached; no user data is transmitted. These requests are made from your WordPress server (server-side), not from the user’s browser. Use of these services is subject to the [Authyo Terms of Service](https://authyo.io/terms-service/) and [Privacy Policy](https://authyo.io/privacy-policy/). ### Privacy Policy This plugin transmits personal data to the Authyo API (`https://app.authyo.io`) in order to deliver and verify one-time passwords. The following data may be sent: * **Phone number or email address** — transmitted when a user requests an OTP, to identify the delivery target. * **OTP session token (maskId)** — a temporary, opaque identifier returned by the Authyo API and used only to verify the code the user enters. No contact information is included in the verify request. * **Country list requests** — no personal data is transmitted; only a request for supported country codes is made. No personal data collected through this plugin is stored on the Authyo servers beyond what is necessary to deliver and verify a single OTP session. Site administrators are responsible for informing their users about this data transmission in their own site privacy policy. For full details, refer to the [Authyo Privacy Policy](https://authyo.io/privacy-policy/) and [Terms of Service](https://authyo.io/terms-service/). ### About **Konceptwise Digital Media Pvt. Ltd.** is the parent company that officially develops and maintains this plugin. **Authyo** is a product line developed and owned by Konceptwise Digital Media Pvt. Ltd., providing multi-channel OTP verification services (Email, SMS, WhatsApp, and Voice Call) for web applications. This plugin is NOT affiliated with, endorsed by, or officially supported by Elementor Ltd. It is an independent third-party integration. ## Installation #### Automatic Installation 1. Log in to your WordPress admin panel. 2. Go to **Plugins Add New Upload Plugin**. 3. Choose the plugin ZIP file and click **Install Now**. 4. Click **Activate Plugin**. #### Manual Installation 1. Upload the `authyo-otp-for-elementor-form` folder to `/wp-content/plugins/`. 2. Activate the plugin through the **Plugins** menu in WordPress. #### After Activation 1. Navigate to **Authyo OTP for Elementor Form General Settings**. 2. Enter your **App ID**, **Client ID**, and **Client Secret** from your [Authyo dashboard](https://app.authyo.io). 3. Enable the OTP channels you want to use under the **OTP Channel** tab. 4. In the Elementor editor, add the **Authyo Form** widget to any page. 5. In the widget’s repeater fields, enable **OTP** on any Email or Phone field. ## FAQ ### Do I need an Authyo account? Yes. You need a free or paid Authyo account to obtain your API credentials (App ID, Client ID, Client Secret). Sign up at [https://app.authyo.io](https://app.authyo.io). ### Which OTP channels are supported? Email, SMS, WhatsApp, and Voice Call. Each channel can be enabled or disabled individually under **Authyo OTP for Elementor Form General Settings OTP Channel**. ### Does it work without Elementor Pro? Yes. The plugin works with both the free Elementor plugin and Elementor Pro. ### What happens if the Authyo API is unreachable? If the Failsafe Protection option is enabled (under General Settings), forms will still submit even if the OTP cannot be delivered. You can configure a notification email to be alerted when this occurs. ### What data is sent to Authyo? When sending an OTP, the user’s phone number or email address, the selected OTP channel, and OTP length/expiry settings are sent to the Authyo API. When verifying, the maskId (a temporary session token returned by Authyo) and the OTP entered by the user are sent. No personally identifiable information is stored by this plugin beyond standard WordPress transients used for session management. ### Is the country list cached? Yes. The country list is fetched from the Authyo API once and cached as a WordPress option. You can refresh it manually from the **Country** tab in the settings panel. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Authyo OTP for Elementor Form” is open source software. The following people have contributed to this plugin. Contributors * [ Konceptwise Digital Media Pvt Ltd ](https://profiles.wordpress.org/konceptwise/) [Translate “Authyo OTP for Elementor Form” into your language.](https://translate.wordpress.org/projects/wp-plugins/authyo-otp-for-elementor-form) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/authyo-otp-for-elementor-form/), check out the [SVN repository](https://plugins.svn.wordpress.org/authyo-otp-for-elementor-form/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/authyo-otp-for-elementor-form/) by [RSS](https://plugins.trac.wordpress.org/log/authyo-otp-for-elementor-form/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Compatibility: the REST nonce and OTP session tokens are now fetched at runtime instead of being embedded in the page, so forms work correctly behind server- level and CDN page caches (Varnish, Nginx FastCGI, Cloudflare) that cannot honour DONOTCACHEPAGE. * Reliability: a request rejected because a cached page supplied an expired nonce is now retried automatically with a fresh one. * Maintenance: page caches are purged automatically after a plugin update. * Added the `authyo_ef_disable_page_cache` filter for site owners who prefer to keep form pages cached. #### 1.0.0 * Initial release. * Supports Email, SMS, WhatsApp, and Voice Call OTP channels. * 11 field types in the Elementor widget. * Rate limiting, failsafe protection, and country dropdown with cache. ## Meta * Version **1.0.1** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 5.8 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Tags * [elementor](https://wordpress.org/plugins/tags/elementor/)[otp](https://wordpress.org/plugins/tags/otp/) [phone verification](https://wordpress.org/plugins/tags/phone-verification/)[sms](https://wordpress.org/plugins/tags/sms/) [verification](https://wordpress.org/plugins/tags/verification/) * [Advanced View](https://wordpress.org/plugins/authyo-otp-for-elementor-form/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/authyo-otp-for-elementor-form/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/authyo-otp-for-elementor-form/reviews/) ## Contributors * [ Konceptwise Digital Media Pvt Ltd ](https://profiles.wordpress.org/konceptwise/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/authyo-otp-for-elementor-form/)