To make an e-signature stronger evidence, you can require signers to prove they control the email address the quote was sent to. An admin switches this on with Verify the signer's email with a one-time code in Settings → Branding & layout.
What the customer does
- In the acceptance dialog, under Step 1 · Verify your email, they click Email me a code.
- A 6-digit code is emailed to their address. The dialog shows where it was sent, with part of the address hidden.
- They type the code and click Verify. The step shows Verified and they can go on to sign.
The code goes to the email address of the recipient whose link was used. If the page asks for an email address instead, the customer enters the address the quote was sent to.
The rules
- Each code expires after 15 minutes.
- A new code can be requested with Resend, but not within about a minute of the previous one, and at most three codes can be sent in ten minutes from one IP address for one quote link.
- After 5 wrong attempts the code stops working and a new one must be requested.
- Once a recipient has verified, they stay verified for that quote.
On the record
The verification is noted on the customer's page ("(verified)" after the email address in the digital fingerprint), in the editor ("email verified"), on the signature certificate in the PDF ("(email verified)") and in the PDF's audit trail, alongside the time the code was sent and confirmed.
If the code does not arrive
- Ask the customer to check their spam or junk folder, then wait a minute and click Resend.
- Check that the contact's email address is right. If it is wrong, correct it and resend the quote.
- If the customer cannot receive email at that address, you can record their acceptance yourself with Accept on behalf of customer. That acceptance is marked as recorded by your organisation. See Accept, decline or withdraw on the customer's behalf.
See also Emails not arriving.
Last updated 19 October 2026