Generating OTPs

The Generate OTP workflow action creates a secure, time-limited one-time password for a contact.

Workflow Action: Generate OTP

Add the Generate OTP action to any contact-based HubSpot workflow. When a contact reaches this step, the app generates a code using your configured settings and makes it available for subsequent workflow steps.

Code Types

Numeric

Generates digits only (0-9). Best for SMS or phone-based verification where users type on a numpad.

Example: 482951

Alphanumeric

Generates uppercase letters and digits, excluding ambiguous characters (I, O, 1, 0) to avoid confusion.

Example: A7K3M2

Alpha Only

Generates uppercase letters only, excluding I and O.

Example: JKRFMN

Code Length

Choose 4, 6, or 8 characters. Longer codes are more secure but harder to type. Six characters is the most common choice.

Expiration

Codes expire after the configured time window. The default is 10 minutes. Choose a shorter window for higher security, or a longer window if users need more time to complete verification.

What Happens After Generation

After the code is generated, it's available for use in the rest of your workflow. You can:

• Branch your workflow based on whether the generation succeeded
• Send the code to the contact via the built-in email delivery option
• Store the code on a HubSpot contact property for use in email templates or other workflow actions

Store in HubSpot Property

When enabled, the generated OTP is written to a contact property you select. This lets you:

• Display the code in HubSpot email templates using personalization tokens
• Reference it in other workflow actions
• View it on the contact record for support purposes

Send via Email

When enabled, the app sends the OTP directly to the contact's email address using a customizable template. You can configure the subject line, greeting, body text, and footer message in the app settings.

Sidebar Card

The Generate OTP sidebar card appears on contact records in HubSpot. Support agents can use it to manually generate a code for a contact without going through a workflow.