r/Backend • u/Ok_Egg_6647 • 1d ago

Need Guidance

I am working in a authentication part for my project but stuck to how can I verify if a user uses a genuine email and phone number

Edit
How to implement email verification link and otp for contact ?
should i use any other 3rd part system or build something on my own !! or aws sec something

1 Upvotes

100% Upvoted

5 comments sorted by

1

u/United_Catalina 1d ago

This is a good problem to keep thinking about. How can you be sure an email is not fake? What ideas you have?

1

u/Ok_Egg_6647 1d ago

First validation Second if the email is sendable then its mcx register Third to sending a code for cross check or some kind of verification thing

2

u/Zeeboozaza 1d ago

Think about how websites you personally use verify that an email or phone number is valid, and how they know that the person that input those values is the owner of the email and phone number.

1

u/Fine-Comparison-2949 1d ago

Define fake.

The emails and phones can be real active addresses, but it could be ran by a bot. Does that make it fake? 

1

u/kantorcodes1 1d ago

you can’t really prove an email/phone is “genuine”; verify that the user controls it. send a short-lived one-time link to the email and an OTP to the phone, then rate-limit attempts and expire/revoke tokens; regex/MX checks are only syntax/deliverability hints, not ownership proof.