---
title: "What is a visit token in Signup Protection? | Emvero"
description: "How a visit token connects browser collection to a server signup check, and why missing or reused tokens do not establish a person’s identity."
url: https://emvero.io/glossary/visit-token/
language: en
updated: 2026-10-30
---

All terms

Glossary

# Visit token

An opaque value connecting the browser’s token request to a later signup check. It is not a persistent visitor identity.

In Signup Protection, the browser obtains a token when the registration form becomes visible, after applicable consent. Your code calls `visitToken.fetch(vid)`, writes the returned string into a form field and passes it to your server. The public page key belongs in the browser; the secret API key stays on the server.

Use an opaque, visit-scoped value for `vid`. Do not send an email address, phone number or account ID. Neither the token nor `vid` establishes that a visitor is a unique person. A new token does not establish that a new account belongs to somebody new.

A missing or unusable token gives `signals.status: token_unusable`. When email would otherwise allow, this requires mailbox confirmation. An unavailable signals service is a different outcome: the combined action follows email alone. Neither means that the visit passed every check.

For a transport retry, retain the original request and `Idempotency-Key`. Presenting the same token in a new operation can produce `fp_token_reused`. Follow the [browser and server integration guide](https://emvero.io/signup-protection/) and [read the resulting signup check](https://emvero.io/blog/reading-a-signup-check/).

## Related terms

### Signup signal

Evidence about a visit and its submitted request, returned separately from the email result and the final signup action.

## Compared side by side

### CAPTCHA vs honeypot for signup forms

Compare the evidence, visitor effort and failure handling of CAPTCHA and honeypot, then choose how to combine them with email confirmation and visit signals.

[All terms](https://emvero.io/glossary/)

## Connect visit evidence to your signup decisions

Use Signup Protection when you need email and visit evidence in the same registration flow. Your application keeps control of confirmation and account access.

Start for free

View documentation