Phone Verification
Verify a mobile number with a one-time SMS code during sign-up, account linking, or sign-in
Last updated
Phone verification adds a one-time SMS code (OTP) to your account. It's an optional feature your organization can turn on — when enabled, it strengthens sign-up and gives you a phone-based sign-in option.
Phone verification is off by default. If you don't see a phone step, your deployment hasn't enabled it.
Where phone verification shows up
| Context | When it happens |
|---|---|
| Sign-up | If enabled, step 1 of the wizard asks for your number and requires you to verify it before continuing. |
| Account linking | Already signed in? Visit /verify-phone to add and verify a number on your existing account. |
| Sign-in | When phone sign-in is enabled, the login page shows a phone tab — enter your number and the texted code to sign in. |
How the code flow works
- Enter your mobile number, choosing the correct country code. NemoRouter normalizes it to international (E.164) format, e.g.
+14155550123. - We send a one-time code by SMS. Codes are 4–8 digits.
- Enter the code to verify. Once verified, you can proceed (finish sign-up, link the number, or sign in).
Codes and send attempts are rate-limited — there's a short cooldown between sends, and a cap per number and per IP over a rolling window.
One number, one account
A phone number can be linked to only one NemoRouter account. If you try to use a number that's already linked, you'll see:
"This phone number is already linked to an account. Please sign in instead."
What you'll see if something's wrong
| Message | Meaning |
|---|---|
| "Please enter a valid phone number" | The number isn't in a valid format — include the country code. |
| "Invalid or expired code." | The code was wrong or timed out — request a new one. |
| "Could not send code. Please try again." | A delivery/provider hiccup — retry in a moment. |
| "Verify your phone number to continue" | Sign-up can't proceed until the number is verified. |
Testing in non-production environments
In development and QA builds, phone auth can run in a test mode that uses a fixed number and a fixed code shown on screen — no real SMS is sent. Production uses real SMS delivery.
Next steps
- Creating an Account — Where phone verification fits in sign-up
- Logging In — Phone OTP as a sign-in method
- Two-Factor Authentication — Add an authenticator app as a second factor