You can allow users to use their phone number as their primary identity for authentication. This is a passwordless method, where the user is sent a code via an SMS to verify them on sign in.

⚠️ This feature requires paid third-party services to use. Rates and limitations apply.

Phone authentication requires the services of a messaging provider, in this case, Twilio.

You may need a paid Twilio business account to fully enable this feature, so that it works for local and overseas phone numbers.

Phone authentication interactions are also known as A2P (Application to Person) messaging. Before you implement A2P, check if you need to register your business for 10DLC (10 Digit Long Code) support to be able to send messages, as this is required in some locations.

We also recommend you check Twilio’s guidelines for setting up messaging, and carefully follow procedures for registration, and SMS policies for all relevant countries.

ℹ️ If you just want to test this feature first, Kinde allows you to send 10 messages per month without setting up Twilio. If you want the feature to be live for your users, you must implement the full Twilio setup.

You will need these details from Twilio. They are all available in the dashboard of your Twilio account.

• The SID of your Twilio account
• The Auth Token for your Twilio account
• Your Twilio phone number or the Messaging Service SID (if you set one up)

Refer to the Twilio documentation for assistance setting up.

1. In Kinde, go to Settings > Authentication.
2. In the Identity connection section, select Configure on the Phone tile. The Configure phone authentication window opens.
3. Select the Default country that you want to show on the authentication screen when users sign in.
4. Enter the Twilio details from your Twilio account (see above) in the relevant fields.

5. In the SMS source field, select either the Use Messaging service or Use phone number. Verification codes will be sent from whichever you choose.

   ℹ️ Note that the Twilio messaging service is more suitable for global applications as it detects where the sign in comes from and sends from an appropriate number.

6. Depending on your selection in the previous step, enter either the Messaging service SID or Twilio Phone number in the relevant field.

7. Select which applications you want to switch phone auth on for.
8. Select Save.

You can’t customize the code message that user’s receive. We use a standard format as follows, to allow for easier translation.

Your verification code is [xxxxxx]

When you configure phone authentication, you’ll see that a Connection ID is automatically assigned. If you’re building a custom authentication experience, you’ll need the ID to trigger the phone authentication workflow.