Over 200 add-ons available under a single subscription for $40 per month!
Read More
Submit a request
Phone Authorization, image

Phone Authorization

Allows customers to sign in and register by phone number with an SMS code, password, or two-factor verification.
Please enter a valid addres(es) of the shop where you are going to use the add-on.
By subscription 8 800 ₽

Request a trial version

Write a review
Latest module version Updated:
Have questions about the module? Write to us: HelpDesk
Phone Authorization, image
Phone Authorization, image , 2 image
Phone Authorization, image , 3 image
Phone Authorization, image , 4 image
Phone Authorization, image , 5 image

This add-on is part of our Subscription plan.

Subscribe once - enjoy all add-ons without limits.

The Phone Authorization add-on makes store login and registration easier by letting customers use a phone number, SMS code, password, or two-factor verification. This flow is especially useful for mobile customers and stores where the phone number is the main contact channel.

The add-on reduces extra login steps, speeds up checkout, and helps keep phone numbers in a cleaner format. Customers get access to their account faster, while the store receives more reliable contact data.

Purpose

The add-on brings phone login, phone verification, and related checkout scenarios into one clear flow. It is designed for stores that want to simplify registration, improve repeat purchases, and use the phone number as a reliable customer identifier.

Main features

  • Login by phone number, by email, or by both methods at the same time.
  • Several phone authorization modes: password, SMS code, or two-factor verification.
  • Phone number verification during registration, login, and checkout scenarios.
  • Confirmation code delivery through the selected SMS service.
  • Telegram Gateway support for the first code request with automatic fallback to regular SMS delivery if Telegram is unavailable.
  • Configurable code length, resend delay, and confirmation attempt limit.
  • Phone input mask and country code handling.
  • Settings for the login form, fields, headings, and logo.
  • Tools for finding duplicate phone numbers and numbers with an invalid format.

How it works

The administrator chooses which login methods are available to customers: phone, email, or both. For phone authorization, the store can use a simple SMS-code flow, password login, or an additional verification step.

The customer enters a phone number, receives a confirmation code, and completes login or registration in the same interface. In the SMS flow, the code can be requested immediately after the phone number is entered, without an extra login button click.

If Telegram Gateway is enabled, the add-on tries to send the code through that channel first. If Telegram is unavailable, authorization continues through the configured SMS provider instead of stopping the customer flow.

In the customer profile and during checkout, the add-on helps save phone numbers in the expected format and use them as the main contact. This reduces data errors and makes further customer communication easier.

Location in admin

The main settings are available in Add-ons → Manage add-ons → Phone Authorization. Customer-facing scenarios can be checked on the storefront, in the login form, in the customer profile, and during checkout.

Have questions about the add-on?

Write to us.

Product:
  • Store Builder
  • Store Builder Ultimate
  • Multi-Vendor
  • Multi-Vendor Plus
  • Multi-Vendor Ultimate
Recipient:
  • Buyers
Development
:
  • Frontend
Localization:
  • English
  • Русский
Compatible versions:
  • 4.20
  • 4.19.X
  • 4.18.X
  • 4.17.X
  • 4.16.X
  • 4.15.X
  • 4.14.X
  • 4.13.X
  • 4.12.X

Phone Authorization

Before you start

Before configuring the add-on, make sure the SMS service add-on is installed and active, and that a working provider is selected for confirmation code delivery.

Basic setup

  1. Open Add-ons → Manage add-ons and go to the settings of the Phone Authorization add-on.
  2. In the General section, choose the SMS sending service.
  3. Select whether customers can sign in by phone, by email, or by both methods.
  4. Choose the phone authorization type: password, SMS code, or two-factor authentication.
  5. If needed, enable Telegram Gateway for the first code request. If Telegram is temporarily unavailable, the add-on will use regular SMS delivery through the selected provider.
  6. Save the settings.

Verification and limits

  1. Enable phone number confirmation if the store must verify the phone before completing login, registration, or a checkout scenario.
  2. Set the number of digits in the confirmation code.
  3. Set the resend delay for confirmation codes.
  4. Set the number of code confirmation attempts.
  5. Choose how phone numbers should be stored in the store database.

Login form display settings

  1. Open the Display section in the add-on settings.
  2. Enable or disable displaying the customer name in the profile button.
  3. Change the block title if needed.
  4. Decide whether the sign-up button should be hidden.
  5. Configure email field visibility and make it required only if your scenario needs it.
  6. Optionally upload a logo for the login form and define its dimensions.

Storefront testing

  1. Open the storefront as a regular customer.
  2. Go to the login form and enter a new or test phone number.
  3. Make sure the confirmation code is sent and the code input field appears.
  4. If SMS code login is enabled, verify that the code can be requested immediately after the phone number is entered and that the login button does not interrupt the flow with a wrong login or password error.
  5. Test the resend flow after the timer expires.
  6. If email login is enabled, test that flow separately as well.
  7. If the add-on is used during checkout, test login and phone confirmation during checkout too.

Customer profile testing

  1. Log in as a customer.
  2. Open the customer profile and change the phone number.
  3. Make sure the system asks for confirmation of the new number when required.
  4. Check that the phone number is saved in the expected format.

Working with problematic phone numbers

If the store already has accumulated customer data, the add-on helps find duplicate phone numbers and numbers with an invalid format. This is useful before enabling phone authorization in a live store.

What to check if the code is not delivered

  • Make sure the selected SMS service is active and configured correctly.
  • Check that the required authorization method is enabled in the add-on settings.
  • If Telegram Gateway is used, check whether that channel is available and whether the add-on switches to regular SMS delivery when Telegram cannot be used.
  • Make sure the resend delay is not too long for your test.
  • Check whether the scenario is blocked by the attempt limit.
  • Make sure phone confirmation is enabled where you expect an SMS-based flow.

Changelog

v6.5.2

24.06.2026

Security improvements:

  • Added server-side anti-bot validation for the first SMS authorization request.
  • Added SMS request limits by phone number and IP address to protect the SMS service balance from automated requests.

Bug fixes:

  • Fixed SMS confirmation code checks so an invalid or mismatched phone number no longer triggers a new SMS code automatically.
  • Updated the storefront authorization request to pass CAPTCHA tokens to the server-side check.

v6.5.1

05.02.2026

Bug fixes:

  • Fixed an issue where the add-on could not detect the reCAPTCHA type correctly and confirmation codes were not sent.

v6.5.0

28.01.2026

New features and improvements:

  • Added a built-in CS-Cart authentication token to the API authorization response.

Bug fixes:

  • Fixed an issue related to the add-on behavior when Google reCAPTCHA is disabled.

v6.4.0

19.01.2026

Changed:

  • Updated the phone length validation logic to allow both 11-digit and 12-digit numbers.

v6.3.0

10.12.2025

New features and improvements:

  • Added automatic insertion of the first phone digits.
  • Added settings to display the customer name and change the login block title.

Bug fixes:

  • Fixed duplicated login popup behavior that prevented entering the confirmation code.
  • Fixed phone field layout in checkout.

v6.2.0

16.05.2025

New features and improvements:

  • Added support for Telegram Gateway on the first code request.
  • Added support for BD mode.

Bug fixes:

  • The default installation behavior was adjusted so email authorization is configured predictably after activation.

v6.1.3

27.12.2024

Bug fixes:

  • Fixed an issue where pressing Enter during SMS login showed a wrong password error.

v6.1.2

21.11.2024

New features and improvements:

  • In SMS authorization mode, the login button is hidden and the customer is signed in automatically after code confirmation.

Bug fixes:

  • Fixed checkout phone field locking for authorized customers without a saved phone number.
  • Fixed country selector size and behavior in the phone input field.

v6.1.1

21.08.2024

Changed:

  • Updated the API logic.

v6.1.0

26.07.2024

New features and improvements:

  • Added export tools for customers with duplicate phone numbers and phone numbers containing letters.

v6.0.3

01.07.2024

Bug fixes:

  • Fixed the reCAPTCHA call for PHP 8.0 and higher.

v6.0.2

27.06.2024

Bug fixes:

  • Fixed password recovery when email authorization is selected.

Changed:

  • Improved language wording and redirect behavior when a customer is not found.

v6.0.1

17.04.2024

New features and improvements:

  • The phone input mask now uses the CS-Cart mask settings.
  • Country selection for the phone field now uses countries available in the store.
  • Added phone field locking in checkout for authorized customers.

Bug fixes:

  • Fixed a case where a hidden SMS request block prevented checkout.

Removed:

  • Removed country selection from the add-on settings.

v6.0.0

01.04.2024

New features and improvements:

  • Added a phone input mask.

Removed:

  • Removed the old loader.

v5.0.9

21.03.2024

New features and improvements:

  • Added extra checks for array keys and an additional reCAPTCHA type detection fallback.

Bug fixes:

  • Fixed a JavaScript notice about an uninitialized variable.
  • Fixed phone validation on the profile and checkout pages when phone confirmation is disabled.

Changed:

  • Adjusted phone transfer into order data and the popup authorization flow.

v5.0.8

25.12.2023

New features and improvements:

  • Added profile icon dropdown hiding and direct redirect to the login page for unauthorized visitors.
  • Added a default setting for the “Remember me” option.
  • Added verification of a changed phone number for authorized customers during checkout.
  • Added compatibility with reCAPTCHA v3.
  • Added an option to disable the successful registration message.

Bug fixes:

  • Fixed mobile behavior and phone validation in checkout.
  • Fixed required-state behavior for the phone field.

Changed:

  • Improved JS rendering performance and updated the profile icon display.

v5.0.7

16.10.2023

Changed:

  • Updated the phone field display in checkout and improved mobile behavior.
  • Updated the add-on icon.

v5.0.6

13.09.2023

New features and improvements:

  • Performed internal code refactoring.

Changed:

  • Standardized the temporary email constant value.

Removed:

  • Removed an empty library file that did not affect the add-on behavior.

v5.0.5

16.08.2023

New features and improvements:

  • Added support for using Google reCAPTCHA together with SMS code delivery.
  • Added the add-on logo.

Changed:

  • Standardized language variables, brand elements, and PHP tags.

v5.0.4

15.05.2023

Bug fixes:

  • Fixed SMS sending through the Target SMS service.

v5.0.3

15.05.2023

Changed:

  • Added the add-on licensing logic.
Reviews
Сергей
Установили модуль SMS-авторизации для CS-Cart, чтобы упростить регистрацию. Пользователи стали быстрее входить в аккаунт, сократилось количество забытых паролей. Настройка SMS-сервиса заняла немного времени, но в целом модуль работает стабильно.
Ситников Валерий
Модуль оказался полезным для интернет-магазина с мобильной аудиторией. Авторизация по SMS снизила количество обращений в поддержку из-за восстановления доступа. Интеграция прошла без проблем, обновления устанавливаются стандартно через CS-Cart.
Лухова Маргарита
После внедрения SMS-авторизации заметили рост завершённых регистраций. Код приходит быстро, интерфейс формы выглядит аккуратно и современно. Поддержка помогла с настройкой страны и префиксов, после этого всё заработало без сбоев.
Краснова Инна
Используем модуль для авторизации по телефону уже несколько месяцев. Клиентам стало удобнее входить без пароля, а безопасность аккаунтов повысилась. Понравились гибкие настройки и возможность управлять логикой отправки SMS при повторных запросах.
Similar add-ons