VerifyKit exists for a single job: proving that a person controls an email inbox or a phone number. We deliberately do not build campaign tooling, contact lists or bulk send features, because a verification channel stays reliable only when it is never used for unsolicited traffic.
Two endpoints, documented end to end, with stable error codes.
Plain PHP and MySQL - runs on the same shared hosting your app already uses.
Every request is logged with an ID you can quote in a support ticket.
Codes are generated with a cryptographically secure RNG, stored only as peppered hashes and invalidated the moment they are used. Delivery destinations are masked in every interface, including the admin panel. Rate limits are applied at four layers so a leaked key cannot be turned into a messaging cannon.
SMS delivery is performed through the official API of the provider you configure, honouring their sender-ID, template and consent rules. Accounts that generate abnormal failure rates or target unrelated destinations are suspended automatically pending review.
Create an account and send your first verification code in minutes.
Create free account