AI & Automation · ASG Help
Use OTP phone verification
Plan supported one-time-password workflows through the developer/API feature set.
Before making production changes: exact screen names and platform behavior can change as GoHighLevel, Android, carriers, and the underlying messaging platform evolve. Test changes on a controlled deployment first.
Use OTP for a defined verification event
Examples include verifying that a user controls a phone number before a higher-value account action.
Security basics
- Use short expiration windows.
- Limit verification attempts.
- Do not log OTP values unnecessarily.
- Rate-limit requests by user/device/IP as appropriate.
- Do not treat SMS OTP as phishing-proof or SIM-swap-proof.
Developer testing
Test request, delivery, verification, expiration, invalid-code, and resend behavior before production.
Still not working? Contact ASG with the device name, carrier, GHL location, approximate timestamp, and the exact step that failed.