Generate OTP Card

The Generate OTP card lets your team generate and manage one-time password codes directly from a contact's CRM record in HubSpot -- no need to leave the contact view or trigger a workflow.

Where It Appears

This card appears in the CRM record sidebar on contact records in HubSpot. You can add it to your contact record layout by customizing the middle column in your record view settings.

How It Works

When you open a contact record, the card loads and checks for any active (unexpired) OTP code for that contact. If an active code exists, it displays the code details immediately. If not, you can generate a new code with a single click.

The card uses your app's configured settings (code type, code length, and expiry) to generate codes. It also shows whether email delivery and HubSpot property storage are enabled, so you always know how the code is being delivered.

What You Can Do

Generate a New OTP

Click the Generate OTP button to create a new code. The card displays:

• OTP Code -- the generated verification code in large, bold text for easy reading
• Expires At -- the date and time when the code becomes invalid
• Valid for -- the number of minutes the code remains active
• Reference -- the email address or identifier tied to this code
• Stored in -- the HubSpot property where the code was saved (if property storage is enabled)

View an Active OTP

If the contact already has an unexpired OTP, the card shows it automatically with an "Active OTP" notice. This prevents accidental regeneration and lets you quickly reference an existing code.

Resend the Code

If email delivery is enabled in your app settings:

1. Click Resend Code below the active OTP
2. A confirmation prompt appears showing the recipient's email address
3. Review the email address and click Confirm & Resend
4. A new code is generated and emailed to the contact

The confirmation step prevents accidental sends and lets you verify the recipient before resending.

Regenerate Without Email

If email delivery is not managed by OpsAgent (i.e., you handle sending via your own workflow or integration), the card shows a Regenerate Code button instead. This generates a fresh code without sending an email.

Tips

• Check for active codes first. The card automatically shows any unexpired OTP when you open the contact record, so you do not need to generate a new one if a valid code already exists.
• Use for support scenarios. When a customer calls in needing a verification code, you can generate and read the code directly from their contact record.
• Verify the recipient before resending. The confirmation dialog shows the contact's email address -- always double-check before clicking Confirm & Resend.
• Configure settings first. The card uses your app's settings for code type, length, and expiry. Make sure these are configured on the Settings page before using the card.