Start with the exact address.
Create the verification using the email recipient. If the original request included both email and phone, supply both again when checking the code.
Send a managed code to the supplied email address. Keep the verification result separate from delivery and from the account access your app grants.
Bring the verification into your sign-in flow. Collect the code, check the answer, and help the customer continue.
We sent a six-digit code to
maya@example.com
success: trueYour application decides whether to grant access.
Confirm control of an email address.
Create the verification using the email recipient. If the original request included both email and phone, supply both again when checking the code.
Use Bird Verify, Authifly or a verified sending domain in your workspace. The managed email template carries the code and expiry; its wording is not an editable marketing template.
A wrong code is a normal HTTP 200 response with success: false. After a verification becomes final, another check returns 404. Keep the first definitive result for your application’s next step.
Organize teams in workspaces, control API access, and trace changes through audit logs.