Managing secure verification flows inside HubSpot can be challenging. Whether you need to confirm a contact's email address, authorize a sensitive action, or add two-factor authentication to your customer-facing processes, there has been no native way to generate and verify one-time passwords within HubSpot workflows -- until now.

OTP Verification brings secure, time-limited one-time password generation and verification directly into your HubSpot automation. With a custom workflow action -- Generate OTP -- you can build complete verification flows without relying on external tools or custom development. The app generates cryptographically secure codes in numeric, alphanumeric, or alpha-only formats, with configurable length and expiration windows.

When a code is generated, you have flexible delivery options. The app can automatically send a branded verification email to the contact, write the code to a HubSpot contact property for use in your own HubSpot emails — including the Transactional Email API — or both. To verify a contact's identity — for example on a support call — your team simply asks the contact to read the code back and compares it against the active code shown in the CRM sidebar card, which displays the current code and its expiration in real time. Codes expire automatically after the configured window.

A CRM sidebar card also lets support agents generate and resend OTP codes directly from a contact record, without needing to trigger a workflow. Combined with the in-app settings page where you configure code format, expiry, and email content, OTP Verification gives your team everything needed to run secure verification flows at scale.