What is custom code verification?
Custom code verification is a security check that confirms it's really you before a change to your storefront code is saved. Rebuy emails you a six digit code, you enter it, and your save finishes automatically.
This type of check is sometimes called step up verification or multi factor authentication (MFA). You already passed one check by logging in. The verification code is a second check that only appears for sensitive changes.
Applies to: Anyone who edits custom code in the Rebuy admin, on any plan.
When you save custom code in the Rebuy admin, Rebuy may ask you to enter a six digit verification code sent to your email. This extra security step started on October 23, 2026. It protects the code that runs on your storefront from unauthorized changes.
Which areas of Rebuy require a verification code?
Rebuy asks for a verification code when you save changes in any area where you can add custom code. Saves that don't change custom code, such as native toggles or scheduling, do not ask for a code.
Area | Requires a verification code to save? |
Smart Cart custom code | Yes |
Widget callbacks and templates | Yes |
Theme CSS | Yes |
Landing page templates | Yes |
A/B test code | Yes |
Settings that don't change custom code (for example any native toggles, or scheduling) | No |
How do I verify and save my custom code?
To save custom code, you'll confirm your identity with a code sent to your email, then Rebuy finishes the save for you.
Make your custom code changes in the Rebuy admin.
Click Save.
Rebuy takes you to a verification screen and emails a six digit code to your account's email address.
Open the email from Rebuy and copy the six digit code.
Enter the code on the verification screen.
When Rebuy asks you to save the change you were making, confirm the prompt. Your save completes automatically.
How long does verification last before I'm asked again?
Custom code verification lasts 30 minutes. During that window you can keep saving custom code without entering another code. After 30 minutes, your next custom code save asks for a new verification code.
When your 30 minute window starts depends on how you logged in:
How you logged in | When your 30 minute window starts |
With multi factor authentication (MFA) | When you log in. Your MFA login counts as verification, so you won't be asked for a code on custom code saves for 30 minutes after logging in. |
Without MFA | The first time you save custom code. Rebuy emails you a six digit code at that point, and the 30 minute window starts once you verify. |
FAQs
Will I lose my changes if Rebuy asks me to verify again?
No, you won't lose your changes when Rebuy asks you to verify again. Once you enter the code and confirm the prompt, Rebuy saves the change you were making.
Custom code verification is separate from your login session. Your Rebuy login lasts up to 30 days, and if you're inactive for 30 minutes, Rebuy asks whether you want to continue your session. Neither of those affects the custom code changes you were in the middle of saving.
Why does Rebuy ask for a verification code when I already logged in?
Rebuy asks for a verification code on custom code saves because that code runs directly on your storefront, where your shoppers see it. Logging in confirms who you are at the start of a session, and the verification code confirms it's still you right before a change goes live on your store.
If you logged in with multi factor authentication (MFA) in the last 30 minutes, Rebuy already has a recent verification for you and won't ask for a code. Rebuy only asks when your last verification is more than 30 minutes old, or when you logged in without MFA and haven't verified yet.
This is part of Rebuy's ongoing security work to protect merchant storefronts.
Can I use an authenticator app instead of email?
Not yet. Verification codes for custom code saves are sent by email only. Rebuy plans to add support for authenticator apps in the future.
What should I do if I didn't get the verification code?
If you didn't receive your verification code, try these steps:
Check your spam or junk folder. Verification emails sometimes land there.
Make sure you're using the current Rebuy admin. [LINK NEEDED: article on accessing the current Rebuy admin]
Make sure you're logged in as your own user. Don't use a shared login or another person's account.
If you still can't get past the verification step, contact Rebuy Support through the chat in your Rebuy admin. Let us know which area you were saving in and roughly when you tried.