Phone Verification is an important, high-confidence step in your registration flow to verify that a user has the device they claim to have. Adding phone verification to your application will greatly reduce your number of fraudulent registrations and protect future application users from having their numbers registered by scammers.
This quickstart guides you through creating a PHP, Laravel and AngularJS app that requires a phone verification step with Twilio Verify to create an account. Two channels of Phone Verification are demoed: SMS and Voice.
Ready to add Phone Verification to a demo app and keep the bad actors away? Enter stage left!
Once logged in, visit the Authy Console. Click on the red 'Create New Aplication' (or big red plus ('+') if you already created one) to create a new Authy application then name it something memorable.
Twilio will redirect you to the Settings page next:
Click the eyeball to reveal your Production API Key and copy it somewhere safe. You will use the API Key during the application setup step below.
To complete the quickstart today we'll use PHP 7.0+, Composer, MySQL, and the Twilio PHP Helper Library. Let's walk through each one now - but feel free to skip if you have already installed one.
When doing web development in PHP, we strongly suggest using Composer for package management. This quickstart relies on Composer to install the PHP Helper library. You can find manual Twilio PHP installation instructions on the PHP Helper Library page.
While Twilio's Verify API doesn't return user information you'll need to store, to continue working on the app after this Quickstart you'll want a database. For this demo, we built our user database on top of MySQL 5.x.
If you haven't yet installed it, here are instructions for your platform:
When installed, start MySQL. If you're using the default MySQL credentials (as below), create a schema
account_security with user
homestead and password
Clone our PHP repository locally, then enter the directory:
git clone firstname.lastname@example.org:TwilioDevEd/account-security-quickstart-php.git cd account-security-quickstart-php composer install
cp .env.example .env
Next, copy your Authy API Key from the Authy Dashboard and set the
API_KEY variable in your
Now, launch the application with:
php artisan key:generate php artisan migrate php artisan serve --port 8081
Assuming your API Key is correctly entered and the command above executed correctly, you'll soon get a message that the app is up!
Keeping your phone at your side, vist the Phone Verification page of the demo at http://localhost:8081/verify/
Country Code and
Phone Number, then choose which channel to request verification over, 'SMS' or 'CALL' (Voice). Finally, hit the blue 'Request Verification' button and wait.
You won't be waiting long - you'll either receive a phone call or an SMS with the verification token. If you requested a phone call, as an additional security feature you may need to interact to proceed (by entering a number on the phone keypad).
Either way you requested the passcode, enter the token into the Verification entry form and click 'Verify Phone':
And with that, your demo app is protected with Twilio's Verify phone verification! You can now log out to try the other channel.
Your demo app is now keeping hordes of fraudulent users from registering with your business and polluting the database. Next, you should check out all of the variables and options available to you in the Verify API Reference. Also, for protecting your customers in an ongoing manner (with this same codebase) try the PHP Authy Two-Factor Authentication Quickstart.
After that, take a stroll through the Docs for more Account Security demos and tutorials - as well as sample web applications using all of Twilio's products. Encore!