Phone verification for HubSpot forms on your WordPress site.
When a visitor submits a protected HubSpot form on your WordPress site, FormVerify sends a one-time passcode (OTP) to their phone over WhatsApp or SMS. The form only reaches HubSpot once they enter it, so the leads your sales team gets have phone numbers that work.
Works with HubSpot’s legacy form editor
FormVerify protects HubSpot forms built in the legacy (classic) form editor and embedded with HubSpot’s embed code. On sites HubSpot doesn’t host, forms from the new editor load inside a HubSpot frame that FormVerify can’t reach. Forms your website builder makes itself aren’t covered either.
Set up on WordPress
About ten minutes, and your HubSpot form stays as it is.
- 1
Embed your HubSpot form
Embed the form with HubSpot’s embed code, for example in a Custom HTML block.
- 2
Add FormVerify to WordPress
Copy one snippet from FormVerify and load it on every page. The WordPress guide shows exactly where.
- 3
Protect the form
In FormVerify, switch protection on for the form and pick the field that holds the phone number.
WhatsApp or SMS, from your own accounts
Every plan includes both. hubglo adds no markup to messages; plans start at $69/mo.
- Sent from your own WhatsApp Business number, connected through Meta in a few clicks
- FormVerify creates the OTP message template for Meta to approve
- Meta bills you per OTP delivered, at its rate for the visitor’s country
SMS
- Sent through your own Twilio account, to any mobile number
- Twilio bills you at its normal rates
- Connect it alongside WhatsApp and numbers not on WhatsApp get the OTP by SMS
Not sure which to use? WhatsApp OTP vs SMS compares cost, delivery and fraud risk.
WordPress gotchas
- Keep caching and optimization plugins (WP Rocket, LiteSpeed Cache, Autoptimize) from combining the FormVerify script with others. It reads its portal id from its own script URL, so inside a combined file it can’t start.
- Exclude it from “delay JavaScript until interaction” settings too. A delayed script can load after the visitor’s first click, and that click may be the submit.
What it doesn’t do
FormVerify checks submissions in the visitor’s browser. It isn’t a server-side firewall, and someone posting directly to HubSpot’s form endpoint can skip it. Verified contacts can be marked in HubSpot, so anything that skipped the check is easy to filter out.
Other platforms: Webflow · Shopify · Squarespace · Google Tag Manager
Protect the HubSpot forms on your WordPress site.
14 days free, no credit card. Try it on a real form before you pay.
Start free trial