Phone-based Authorization
This add-on is part of our Subscription plan.
Subscribe once — enjoy all add-ons without limits.
The add-on helps make phone-based sign-in and registration easier, so customers can confirm their number quickly, receive an SMS code, or sign in with a password, while the store gets a simpler and clearer authorization flow.
What it is for
- to let customers sign in and register by phone;
- to confirm the number via SMS or another convenient method;
- to reduce forgotten passwords and extra steps during sign-in;
- to control phone format, resend delays, and confirmation attempts;
- to use phone as the main authorization scenario in the store.
Key features
- authorization by phone or email;
- sign-in with password, SMS, or two-factor mode;
- phone number confirmation;
- SMS sending through external services;
- code resend timer;
- confirmation attempt limits;
- input masks and number formatting;
- store-friendly authorization form display settings.
How it works
1. The customer opens the sign-in or registration form.
2. They enter a phone number and choose the required authorization method.
3. The add-on sends a code or processes password sign-in.
4. After successful verification, the number is confirmed and the user gets access to the account.
5. If needed, you can configure resend delays and attempt limits.
Have questions about the add-on?
- Store Builder
- Store Builder Ultimate
- Multi-Vendor
- Multi-Vendor Plus
- Multi-Vendor Ultimate
- Buyers
- English
- Русский
- 4.20
- 4.19.X
- 4.18.X
- 4.17.X
- 4.16.X
- 4.15.X
- 4.14.X
- 4.13.X
- 4.12.X
Instructions for Phone-based Authorization
What the add-on does
The add-on lets customers sign in and register by phone, while giving the store a more convenient number confirmation flow. It supports authorization by phone or email, sign-in with password, SMS, or two-factor mode, and sending confirmation codes through external SMS services.
Where to find it
The module settings are available in the admin panel in the add-ons management area. The related SMS Services add-on is used for sending messages and must also be configured.
The functionality appears on the sign-in page, registration page, in the customer profile, and during checkout, where the phone field and confirmation elements can be shown.
SMS Services setup
To make the add-on work, configure the linked SMS Services add-on. There you choose the operating mode and enter the SMS provider data from the provider account. In test mode, messages are not sent, and the site shows a notification instead.
General settings
On the General tab, configure the main flows:
- SMS service selection for sending messages;
- Use TG Gateway on the first send when this code delivery flow is needed;
- Authorization method, phone or email;
- Authorization type, password, SMS, or two-factor;
- Registration notification sending.
Display settings
On the Display tab, configure how the sign-in form looks:
- Show username;
- Show block title;
- Show or hide the registration button;
- Email field control;
- Phone number confirmation;
- Country detection by IP for the initial country code prefix;
- Authorization form logo;
- Enable phone number confirmation;
- Number of digits in the confirmation code;
- Code resend interval;
- SMS confirmation attempts.
How authorization works
The customer opens the sign-in or registration form and enters a phone number. The add-on then sends a confirmation code or processes password sign-in, and after verification the number is confirmed and authorization is completed.
If resend flow is enabled, the add-on respects the resend delay and limits the number of confirmation attempts.
How to check it
1. Configure the SMS Services add-on and enter the provider data.
2. Fill in the general settings of the Phone-based Authorization add-on.
3. Configure the form display and phone confirmation options.
4. Open the sign-in or registration form and test code sending.
5. Make sure the number is confirmed and sign-in completes after the code or password is verified.
Change history
v6.5.0 from 2026-01-28
[!] Fixed an issue related to disabling the Google ReCaptcha add-on.
[+] Added an authentication token of the built-in CS-Cart add-on to the API authorization response.
v6.4.0 from 2026-01-19
[*] Changed the phone number length check, both 11- and 12-character numbers are now allowed.
v6.3.0 from 2025-12-10
[+] Auto-filled the first digits of the phone number.
[!] Fixed a behavior issue where the sign-in window was duplicated and the code could not be entered.
[!] Fixed the phone field layout in checkout.
[+] Added the “Show name” and “Show block title” settings, moved from the “Login in 2 clicks” add-on.
v6.2.0 from 2025-05-16
[+] Added a setting that allows authorization through Telegram Gateway with SMS request.
[!] The default “Authorization by email” setting is now selected on first installation.
[+] Added BD.
v6.1.3 from 2024-12-27
[!] Fixed an issue where pressing Enter during SMS authorization showed a password input error.
v6.1.2 from 2024-11-21
[+] If SMS authorization is selected, the “Sign in” button is hidden and automatic sign-in happens after SMS is entered.
[!] Fixed checkout blocking when a user is authorized but has no phone number filled in.
[!] Fixed the country selector size matching the phone input field.
[!] Fixed country selection in the phone input field.
v6.1.1 from 2024-08-21
[*] Changed the API logic.
v6.1.0 from 2024-07-26
[+] Added export of duplicate phone numbers and phone numbers containing letters.
v6.0.3 from 2024-07-01
[!] Fixed the Recaptcha call function for PHP 8.0 and newer.
v6.0.2 from 2024-06-27
[!] Fixed password recovery when email was selected.
[*] Adjusted the language variable and redirect when the user is not found.
v6.0.1 from 2024-04-17
[+] The input mask is now taken from CS-Cart settings.
[+] Country selection is now taken from available countries based on enabled status.
[+] Added phone field blocking in checkout when the user is authorized.
[-] Country selection was removed from the add-on settings.
[!] Fixed an issue where a hidden SMS request block prevented checkout completion.
v6.0.0 from 2024-04-01
[+] Added an input mask.
[-] Removed the loader.
v5.0.9 from 2024-03-21
[*] Adjusted the JS code in the authorization popup template during checkout.
[*] Adjusted the phone number transfer to order information.
[+] Added array key existence checks in hooks.php.
[!] Fixed a JS notice about an uninitialized variable.
[!] Fixed missing phone validation on the profile and checkout pages when the “Enable phone number confirmation” setting was disabled.
[+] Added a function check for recaptchi type retrieval in case the recaptcha add-on is disabled.
v5.0.8 from 2023-12-25
[!] Fixed several bugs related to authorization on mobile devices.
[+] Added hiding of the dropdown on the profile icon and a direct redirect to the sign-in page when the user is not registered.
[!] Fixed phone number validation on checkout.
[+] Added a default value setting for the “Remember me” field in the authorization form.
[+] Added a phone number verification algorithm for a registered user who entered a different phone number during checkout.
[!] Fixed the field being marked as required incorrectly.
[*] Improved JS rendering for faster operation, JS is rendered before the page is fully loaded.
[+] Added compatibility with RecaptchaV3.
[+] Added the ability to disable the successful registration message from module settings.
[+] Added a mechanism to block the phone input field until JS scripts are loaded, controlled by module settings.
[*] Changed the profile icon display in the top block on all pages.
v5.0.7 from 2023-10-16
[*] Changed the phone number input display on the checkout page.
[*] Fixed module behavior on mobile devices.
[*] Updated the module icon.
v5.0.6 from 2023-09-13
[+] Code refactoring.
[-] Removed the empty app/addons/csc_sms/lib/csc_sms.php file.
[*] Replaced TMP_EMAIL_VALUE with test@makeshop.pro.
v5.0.5 from 2023-08-16
[+] Added the ability to use captcha with SMS sending to the phone number when the Google Captcha add-on is enabled and captcha is shown on the sign-in page.
[*] Standardized language variables.
[*] Standardized the company icon.
[*] Standardized the company name.
[+] Added the module logo.
[*] Replaced short <? tags with standard <?php tags.
v5.0.4 from 2023-05-15
[!] Fixed SMS sending through the Target SMS API, the sending code was changed.
v5.0.3 from 2023-05-15
[*] Licensing.
Legend:
[+] Added
[-] Removed
[*] Changed
[!] Bug fix