Step 3: Confirm your identity

Step 3 verifies you control the Call 24/7 login before an email OTP is sent. This prevents cancellation by anyone with brief unattended access to an open browser session.

Form layout

• Title: Confirm your identity
• Subtitle: Enter your account password to continue.
• Password input type toggles text/password via eye icon button (tabIndex -1 on toggle).
• Autocomplete: current-password

Submit

Footer single button Verify password submits form. Busy label: Verifying…

Success path:

1. POST /auth/verify-password with password body.
2. On success advance to Step 4, clear OTP field, start 60 second resend cooldown.
3. Email with six digit code sent asynchronously by backend.

Errors

• Empty password: Password is incorrect. Please try again.
• HTTP 401: same incorrect password message.
• Other errors: formatted API detail or Could not verify password. Try again.

Google sign-in accounts

Accounts created via Google still have password step in modal if backend supports password verify for linked credentials; if your account is Google-only without password, contact support documentation in Security Centre for credential setup before cancelling.

Security notes

Password is not re-displayed on Step 4 but is retained in modal state for OTP resend calls. Closing modal resets all fields via reset() callback on close.