Validate My Call
Stop guessing who’s really on the phone. Validate My Call (validate.codes) gives you a simple way to verify callers using a secure 6-digit code from their authenticator app before you reset a password, touch a server, or grant access.
Designed for MSPs, IT departments, and vendors who take security and social-engineering seriously.
What is Validate My Call?
Validate My Call is a small, focused WordPress plugin that adds a caller verification step to your support process. It uses standard TOTP codes (like Google Authenticator) to confirm that the person on the phone is the same person who owns the account.
Instead of relying on “Hi, it’s John from Accounting,” your team can quickly ask for a time-based 6-digit code. The caller reads the code from their authenticator app, your team types it into the Validate My Call console, and the system responds with a clear PASS or FAIL.
- Protects sensitive actions like password resets, mailbox access, and server changes.
- Works with common authenticator apps (Google Authenticator, Microsoft Authenticator, etc.).
- Simple for clients to set up, simple for admins to verify.
How It Works
Validate My Call has two sides: a quick portal for your clients and vendors, and a verification console for your admins and support team.
What your callers do
Your clients or vendors log into your site and complete a quick setup so they can be verified when they call your help desk.
- Step 1 – Contact profile
They fill out their name, company, (optional) company ID, email, and phone number. This ties their verification to their real contact details. - Step 2 – Authenticator setup
On the Phone Verification Setup page, they see a QR code and a manual secret key. They add this to their TOTP app (like Google Authenticator). - Step 3 – Confirm with a 6-digit code
They enter one of the 6-digit codes from their app to confirm everything works. Once validated, their caller verification is active. - When they call you
They open their authenticator app, read you the current 6-digit code, and your team verifies it in the console before making changes.
What your team does
Your staff gets a clean, mobile-friendly verification interface so they can check caller codes in seconds while on the phone.
- Look up the caller
In the Validate My Call console, your team can search by email, username, or phone. - Enter the code
Ask the caller for the 6-digit code from their authenticator app. Enter it into the console. - Get instant PASS / FAIL
The plugin validates the code and clearly displays whether it is valid for that user right now. - Control per-user status
From the user’s profile, admins can mark verification as active, require re-validation, disable it, or reset the setup entirely.
Why It Matters
Social-engineering calls are getting smarter. Validate My Call gives your team a repeatable, defensible process to confirm identity before making sensitive changes — without adding a ton of friction.
With Validate My Call, your answer to “How did you verify this caller?” is no longer “They knew some details on the account.” Instead, you can point to a clear MFA-style verification step using a time-based code that only the real user should have.
Get Started with Validate My Call
Ready to add caller verification to your help desk or MSP stack? Fill out the form below and we’ll reach out with details and next steps. This form sends directly to sales@validate.codes.
Request info, demo, or early access
Tell us a bit about your environment so we can respond with the most relevant options.