Phone Verification is an important, high-confidence step in a registration flow to verify that a user has the device they claim to have. Adding Twilio Verify phone verification to your application will greatly reduce your number of fraudulent registrations and protect future application users from having their numbers registered by scammers.
Ready to add phone verification to a demo app? Enter stage left!
Once logged in, visit the Authy Console. Click on the red 'Create New Aplication' (or big red plus ('+') if you already created one) to create a new Authy application then name it something memorable.
Twilio will redirect you to the Settings page next:
Click the eyeball icon to reveal your Production API Key, and copy it somewhere safe. You will use the API Key during the application setup step below.
Start by cloning our Ruby on Rails repository. Enter the directory and use bundle to install all of our dependencies:
- Open the file
ACCOUNT_SECURITY_API_KEYto the API Key from the above step
- Now, save the file as
If your file is saved as
config/application.yml, the server will load it automatically as it starts up.
Next, create the tables:
And then... actually, that's all the setup you'll need.
Now, launch the application with:
Assuming your API Key is correctly entered, you'll soon get a message that the app is up!
Keeping your phone at your side, vist the Phone Verification page of the demo at http://localhost:3000/verification/
Country Code and
Phone Number, then choose which channel to request verification over, 'SMS' or 'CALL' (Voice). Finally, hit the blue 'Request Verification' button and wait.
You won't be waiting long - you'll receive a phone call or SMS with the token. If you requested a phone call, as an additional security feature you may need to interact to proceed (enter a number on the phone keypad).
Either way you request the passcode, enter the token into the Verification entry form and click 'Verify Phone':
And with that, your demo app is protected with Twilio's Verify! You can now log out to try the other channel.
Your demo app is now keeping fraudulent users from registering with your business and polluting the database. Next, check out all of the variables and options available to you in the Verify API Reference. For protecting your customers in an ongoing manner (with this same codebase) try the Ruby on Rails Authy Two-Factor Authentication Quickstart.
After that, take a stroll through the Docs for more Account Security demos and tutorials - as well as sample web applications using all of Twilio's products.