The password field is not required. When the login feature is enabled, you can turn on the OTP (one-time password) option in the login field settings. When it's enabled, the user will receive a verification code to log in. The generated code will be valid for 15 minutes.
Important: Once a user has logged in, their browser may remember their login for that extension. They may need to log in again if browser storage is cleared or blocked, or if they use a different browser.
When using this feature, ensure that your field contains exactly one valid email address or phone number for each record and nothing else (e.g. do not use fields that contain multiple email addresses), as email verification will fail otherwise.
To set this up, go to:
Your Form/Portal settings
For a Form, select Share in the Builder toolbar. For a Portal, go to Users & Login.
Locate the Login Fields setting
Click on a login field (see field type limitations below)
Turn on Two-Factor Authentication (Email verification) or Two-Factor Authentication (Phone verification).
Verification is available for field types including the following:
Single Text
Long Text
Email
Barcode
Single select
Multi select
Formula
Lookup
Phone
For an Airtable Phone field, users must enter the same phone number, including the country code; spaces, parentheses, and hyphens do not need to match. For SMS delivery, use a valid international phone number.
When using email verification it is usually recommended to only use the field containing the email address as your login field, since the email verification provides the authentication. When not using email verification, it is recommended to use at least two fields (e.g. username and password) for authentication. You should avoid maintaining sensitive credentials in your Airtable base. If email verification is not an option for you, we recommend that you use a pin field for login, instead of a password. Or in some cases, the login fields could be a combination of personally identifiable info. E.g. name, birthdate, phone number, address, etc. This way you will ensure that you don't have to store their password.
Email verification customization
Once you turn on this feature, two more fields will show up where you can set the custom sender name and the subject of the login verification email:
Custom subject for confirmation email (optional)
Custom sender name for confirmation email (optional)
Keep the custom sender name on one line and within 100 characters. Punctuation and emoji are allowed, but do not use < or >, line breaks, or hidden formatting characters. Extra spaces at the beginning and end are removed. Leave it blank to use miniExtensions.
You will also be able to set a Fallback phone number field so that users can enter their phone number instead to receive the OTP via SMS (restrictions based on geographical location may apply). The phone number entered by the user must match the phone number stored in the selected field for the record related to the email address entered prior. Otherwise you will see the following error:
Phone number doesn't match with existing records.