Your users should very rarely encounter the verification code. We implemented this to ensure that only your members can modify their own information through the action center.
For example, without this in place, nothing would prevent another person from entering in your email address in a campaign, changing your name or possibly some other information for you, and sending messages on your behalf. The code is a last ditch effort to prove you have ownership of the email address you’re using to send a message. We first attempt to verify that ownership using the following methods. If the person taking action:
- Comes in through a personalized link in an email sent through VoterVoice, or
- Comes in any other way besides a personalized link but has previously chosen to be remembered via the "Remember Me" checkbox
Our system will recognize that person, and they will not need to enter in their information from scratch. If they change their existing information, they will not see the verification code. Even if the person does not come in through the personalized email or has not previously chosen to be remembered, as long as they enter in their same information, they will not see the code. A completely new user to VoterVoice would never see this verification code.
Only if the person does not come in through the personalized email or didn’t choose to be remembered, and they use an email address already in use in the system, and change existing ‘core’ information (name, email, or physical address), then the verification code triggers. They just have to get the code from their email and paste/type it in where the system asks for it. Because of the reasons outlined above, this code process triggers rarely.
We don’t require creating a password based account to take action, so the verification code is our way of balancing security with an open system. I hope this helps, but let us know if you have any questions.