Verify your phone number

Cora requires a verified phone number before you can submit reports, vote, or comment. OTP flow lives on /pages/verify-phone.

Before you can submit reports, vote, or comment, your profile must have phone_verified set in Supabase (done automatically after a successful OTP). Browsing the reports feed and interactive map does not require an account or verification.

If you are signed in but not verified, the upload page shows an authorization reminder with Authorize Now (to /pages/verify-phone) or Authorize Later (dismiss for this session). You cannot use the report form until you complete verification.

Where to verify

Phone verification happens on the dedicated page:

/pages/verify-phone

You can open it from:

• Authorize Now on the in-app modal when you try to upload without being verified, or
• Your browser’s address bar: go to /pages/verify-phone while signed in.

The Account page (/pages/account) is for your profile, avatar, and your reports list. The SMS + OTP inputs are on /pages/verify-phone, not embedded in the account form.

Steps on the verify-phone page

1. Enter your phone number

   Type your mobile number and click Send Code.

2. Enter the 6-digit code

   Cora sends a one-time code via SMS. Enter each digit in the six boxes.

3. Submit

   Click Submit. On success you are sent to Account with a confirmation query flag, and the app refreshes your session so the navbar and upload page see you as verified.

For US numbers, the client normalizes many common formats to E.164 (for example, 10 digits get a +1 prefix). For international numbers, include the country code.

Resend cooldown

Respecting verify-phone-form.tsx, the cooldown between Send code requests is 600 seconds (10 minutes). A timer shows when you can request again.

Guests on the upload page

If you are not signed in and open Make a Report, you see a different modal (sign-in variant): Not now or Sign in (to login with next=/pages/upload). That is separate from phone verification.