OTP For Checkout

• So for this navigate to Apps in your Shopify admin, and then click on SMS Alert.
• Here click on OTP Settings
• Enable OTP for Cart/checkout by clicking on this checkbox.
• You can congifure the SMS text, please ensure you have this [otp] tag in sms text.
• Click on save changes.
• Now navigate to Online Store in your Shopify admin and click on Customize button in your current theme.
• Now click on App embeds and enable SMS Alert Checkout OTP option and click on Save button on top right of that page.
• Now the configuration is done, Lets see how this works.
• Now if i go to any product page, there are 2 options to make a purchase, one is “add to cart”, and another one is “buy it now”.
• If i click on buy it now, i will be prompted to enter my mobile number, if i am not logged in, and then an OTP will be sent to this number, once i enter the correct otp, it would proceed further to checkout page.
• The second option i.e. Add to cart, if i click on it, i am redirected to cart page, and when i click on checkout i am being prompted to verify my mobile number.
• In case someone by passes the cart page and directly hits the checkout url in browser, the order will be placed without the otp verification, this is because of the fact that shopify does not allow apps to modify the checkout page.
• Is there any solution for this scenario?
• Yes, we can still verify the user on the order confirmation screen. Any OTP unverified orders will be prompted to enter the OTP to mark the order as verified.
• All verified orders will have a mobile verified tag in admin section, also it will be added in additional details in that order.
• So this way admin can identify which order is verified by an otp and which is not verified.

FAQ’S

1. 1. What does “OTP for Checkout” mean?

   This feature enables a **one-time-password (OTP) verification step** for a customer’s mobile number before they complete the checkout process. It ensures the mobile number is verified, adding an extra layer of confidence for the merchant.

2. 2. How do I enable OTP for checkout in Shopify using SMS Alert?

   According to the guide:
   1. Go to **Apps** in your Shopify admin and open **SMS Alert**.
   2. Within the app, go to **OTP Settings** and check the box labelled **“Enable OTP for Cart/checkout”**.
   3. Configure your SMS text; you must include the tag **[otp]** in the SMS content so that the OTP code is populated.
   4. **Save** changes.
   5. Then navigate in Shopify to **Online Store → Customize (theme) → App embeds** and **enable “SMS Alert Checkout OTP”** option, then save.

3. 3. How does the flow work for the customer?

   If the customer clicks **“Buy it now”** (without logging-in) or proceeds to the cart then checkout, they will be prompted to enter their mobile number. After entering, an OTP is sent. Upon entering the correct OTP, they continue to checkout.
   
   **Scenario: Bypassing the Cart**
   – If someone bypasses the cart page and directly lands on the checkout URL, the OTP step **may not appear** — this is due to Shopify restrictions on modifying the checkout page.
   – To handle that scenario, the app supports **Post-Order Verification**: if an order is already placed without OTP verification, on the order confirmation page the user is asked to verify the number. Verified orders are tagged **“mobile verified”** in Shopify admin.

4. 4. What template changes are required for the SMS message?

   You must include the placeholder **[otp]** in your SMS text (within the SMS Alert app) so the system can insert the actual OTP code. Without that tag, the OTP may not function correctly.

5. 5. Are there any limitations of this feature in Shopify?

   Yes. Because Shopify limits apps from altering the core checkout flow for non-Shopify Plus stores (or for certain modifications), the OTP may not trigger if a user **directly accesses the checkout URL** without going through the cart/ “Buy it now” flow. In such cases the post-order verification workflow becomes relevant.

6. 6. What happens in Shopify admin once the number is verified?

   Once verification is completed:
   – The order record will have an extra detail indicating that the mobile number was verified.
   – The admin can distinguish orders that were **“mobile-verified”** vs those which weren’t.

7. 7. Why is this useful for merchants?

   – It helps ensure **valid mobile numbers** are used, reducing fraud or fake/typo numbers in checkout.
   – It gives you more trust in the customer’s contact details (useful for delivery updates, SMS notifications).
   – It can improve fulfilment accuracy and customer communication.
   – It can serve as an **additional verification step** especially if you allow high-value orders, COD payments, or wish to reduce invalid orders.