If the user uses it, he is already verified and he doesn't need to be verified anymore. If the user isn't logged in, it's saved on the browser cookie. As long the cookie persists, he'll be able to login with that code. Generating new code will replace the old cookie. And we are not setting an expiry to those codes.
Viewing 4 posts - 1 through 4 (of 4 total)
The topic ‘For how long a SMS code si valid ?’ is closed to new replies.