# Email verification codes

> How the optional one-time code works: who receives it, how long it lasts, how many attempts are allowed, and what to tell a customer who cannot find it.

To make an e-signature stronger evidence, you can require signers to prove they control the email address the quote was sent to. An admin switches this on with **Verify the signer's email with a one-time code** in [Settings → Branding & layout](https://app.quoterium.com/settings/branding).

## What the customer does

1. In the acceptance dialog, under **Step 1 · Verify your email**, they click **Email me a code**.
2. A 6-digit code is emailed to their address. The dialog shows where it was sent, with part of the address hidden.
3. They type the code and click **Verify**. The step shows **Verified** and they can go on to sign.

The code goes to the email address of the recipient whose link was used. If the page asks for an email address instead, the customer enters the address the quote was sent to.

## The rules

- Each code expires after 15 minutes.
- A new code can be requested with **Resend**, but not within about a minute of the previous one, and at most three codes can be sent in ten minutes from one IP address for one quote link.
- After 5 wrong attempts the code stops working and a new one must be requested.
- Once a recipient has verified, they stay verified for that quote.

## On the record

The verification is noted on the customer's page ("(verified)" after the email address in the digital fingerprint), in the editor ("email verified"), on the signature certificate in the PDF ("(email verified)") and in the PDF's audit trail, alongside the time the code was sent and confirmed.

## If the code does not arrive

- Ask the customer to check their spam or junk folder, then wait a minute and click **Resend**.
- Check that the contact's email address is right. If it is wrong, correct it and resend the quote.
- If the customer cannot receive email at that address, you can record their acceptance yourself with **Accept on behalf of customer**. That acceptance is marked as recorded by your organisation. See [Accept, decline or withdraw on the customer's behalf](https://quoterium.com/help/sending-and-follow-up/accept-decline-or-withdraw-for-the-customer).

See also [Emails not arriving](https://quoterium.com/help/troubleshooting/emails-not-arriving).

Source: https://quoterium.com/help/customer-view-and-e-signature/email-verification-codes