Configure Support PIN rotation and one-time mode in WHMCS
Choose how long a Support PIN remains usable for your support process. PD Support PIN can keep it unchanged until regeneration, rotate it on a schedule, or replace it immediately after a successful verification.
Choose the behaviour your team needs
By default, Auto-rotate PINs every N days is 0 and Regenerate the PIN after a successful verification is off. In that setup, the PIN changes when the client or authorised staff regenerate it.
Scheduled rotation refreshes PINs through the normal background job. One-time mode changes the PIN after a match, including checks made through the verification API. These settings can be enabled separately; explain the chosen behaviour to your team so they ask for the current value.
Enable one-time mode
- Open PD Modules → PD Support PIN → Settings.
- Enable Regenerate the PIN after a successful verification and save.
- With a test client account you control, read its current dashboard PIN.
- Select that client on Verify and check the supplied PIN once.
- Confirm the successful result, then have the client refresh or reopen the dashboard and use the new value for a later check.
A successful check can therefore make a previously correct PIN stop matching. Do not repeatedly submit the old value as a way to test the integration; use the new PIN for subsequent verification.
Set scheduled rotation
- In Settings, set Auto-rotate PINs every N days to the intended positive interval and save.
- Confirm that your installation’s normal cron and PD Modules background jobs are running.
- Review the module’s rotation job result and Activity for completed rotations when PINs become due.
- Set the interval back to 0 if you want to disable scheduled rotation.
Saving an interval does not mean every PIN changes instantly. The background job checks PIN age as it runs. Manual client regeneration can still replace a PIN independently when that control is enabled.
Check format changes separately
PIN length supports six to eight characters. Numbers-only PINs chooses digits or the supported mixed-character format. Those changes apply to new or regenerated PINs; existing values keep their old format until regeneration or rotation.
If a PIN changes unexpectedly during a call, check recent regeneration/rotation activity and whether a successful verification already triggered one-time mode. Use the failed-verification checks before changing more settings.
See how Support PIN verification works in WHMCS for the overall workflow, or explore PD Support PIN.