# Disable Email OTP Verification

You have the flexibility to enable or disable email OTP verifications during client registration. This allows you to customize the onboarding process to fit your business needs. By disabling email OTP verification, you can streamline and speed up client registration.

To disable Email OTP verification, follow these steps:&#x20;

### <mark style="color:red;">1)   Disabling Email OTP Verification</mark>

To disable Email OTP Verification, follow these steps:&#x20;

{% tabs %}
{% tab title="Step 1" %}

1. Navigate to Login / Registration Settings.&#x20;
2. Choose either "Trader Registration Form" or "IB Registration Form", depending on your preferred onboarding flow. \\

   <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FiIyKNlgof45F871tUBOh%2Fimage.png?alt=media&#x26;token=58326d89-c111-4dba-81b0-f91f1fbd47e6" alt=""><figcaption></figcaption></figure>

{% endtab %}

{% tab title="Step 2" %}

1. Locate "Email" and click the "Edit" icon. \\

   <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2Fp3L2bDn6kiesvFqH1Zif%2Fimage.png?alt=media&#x26;token=b5fe166d-bc80-49b5-b5c6-5ab7972ff2fc" alt=""><figcaption></figcaption></figure>
2. By default, "OTP Verification" will be selected, requiring your clients to verify their email address during registration.&#x20;
3. Uncheck "OTP Verification" to disable email OTP Verification.&#x20;
4. Click "Save" to confirm your changes. \\

   <figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2F91mOlWHT8L2Q2I8o3hLX%2Fimage.png?alt=media&#x26;token=df0b761d-3f97-4572-ad51-00e244b280d2" alt="" width="563"><figcaption></figcaption></figure>

{% endtab %}
{% endtabs %}

### <mark style="color:red;">2)   Risks Associated to Disabling Email OTP Verification</mark>

When email OTP verification is disabled, a notice will appear to alert you to the associated risks:

1. Account Security: Without email OTP, user accounts are more vulnerable to unauthorized access. Malicious entities can exploit this vulnerability by creating accounts with fraudulent or stolen email addresses, bypassing the verification process necessary to confirm ownership.
2. Account Hijacking: The absence of email OTP opens the door to account hijacking attempts. Attackers can exploit vulnerabilities in the registration process to gain unauthorized entry into user accounts. This unauthorized access may result in the compromise of sensitive personal data or enable the perpetration of malicious activities.

<figure><img src="https://1412218885-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZjte3ihj30mTFvqCasyX%2Fuploads%2FoSVGdYqIUQXHKMufn3qf%2Fimage.png?alt=media&#x26;token=27007130-91d0-4658-aef0-cb4639e59e27" alt=""><figcaption></figcaption></figure>
