WALoops OTP Login

• Free — $0/month. Everything you need to try WhatsApp OTP login on a live site: 100 OTPs/month from our shared number, all 3 form styles, login/register/shortcode placement.
• Introduction — $5/month. For sites outgrowing the free quota: 1,000 OTPs/month, use our shared number or connect your own, switch any time.
• Starter Ecommerce — $9.99/month. For high-traffic and WooCommerce sites: unlimited OTPs on your own connected WhatsApp Business number, checkout verification, and priority support.

How it works

1. 01Install and activate the plugin.
2. 02Go to Settings > WhatsApp OTP Login and click Create a free WALoops account — you’ll land straight on your API key. Paste it into the field on this same settings page.
3. 03Pick where the OTP option should appear (login page, registration page, WooCommerce checkout) — or drop the [wa_otp_login] shortcode anywhere.
4. 04Done. Visitors can now log in or register with just their WhatsApp number.
5. 05To verify a phone number on your own Contact Form 7, WPForms, Gravity Forms, or Formidable Forms form instead: add a [wa_otp_verify your-phone] tag in the CF7 form editor, or drag/add the “WhatsApp OTP Verify” field into the other three builders — no extra setup needed once your API key is saved.
6. 06Using Elementor or WPBakery Page Builder? Drag the “WhatsApp OTP Login” widget/element onto any page instead of using the shortcode.

Guides

• WhatsApp OTP vs SMS OTP: cost, delivery and setup
• Fix WhatsApp error 2388185 (can’t create authentication templates)
• WhatsApp template approval: categories and rejection reasons

External services

This plugin connects to WALoops’ WhatsApp OTP service ( https://app.waloops.com/ ) to deliver one-time-password messages over WhatsApp. This connection is required for the plugin to work — there’s no way to send a WhatsApp message without it.

What is sent, and when:

• Creating a free WALoops account : when you click “Get Free API Key” on the settings page, the email address and WhatsApp number you typed, and your site’s URL, are sent to WALoops to create your account and return your API key. Nothing is sent until you click. If you also tick the optional box “Message me on WhatsApp to help me set this up” (unchecked by default), WALoops may send you a WhatsApp message on that number to help with setup; you can reply STOP at any time.
• When a visitor requests a verification code (login, registration, checkout, or a Contact Form 7 / WPForms field): their phone number is sent to WALoops so it can send them a WhatsApp message containing the code.
• When a visitor submits a code : their phone number and the code they entered are sent to WALoops to be checked.
• On the settings page : your account’s monthly usage is fetched from WALoops so it can be shown to you. If you choose to connect your own WhatsApp Business number, your Meta access token and phone number ID are also sent to WALoops, to verify and store for your account.
• Abandoned Cart Reminder (Starter plan, off by default — only shown to eligible accounts): once turned on, a shopper’s phone number, name, and cart contents (items, total, currency, coupon codes, checkout URL) are sent to WALoops after they enter a phone number at checkout and leave without ordering within the configured wait time, so it can send them a WhatsApp reminder. This is decided and timed entirely on your own site (WordPress schedules and cancels the check itself); nothing is sent to WALoops while a shopper is still actively checking out.
• Email code login (optional, off by default): the code is generated and checked entirely on your own site. Nothing about it is sent to WALoops.

Email delivery (Settings > Email delivery): by default the code email goes out through WordPress’s own wp_mail() (and any SMTP plugin you use), or PHP mail() if you pick it. If you instead pick an email provider (Gmail, Outlook / Microsoft 365, Zoho, Yahoo, SendGrid, Brevo, Mailgun, Amazon SES, Postmark) or your own SMTP server, the plugin logs in to that provider’s SMTP server with the credentials you enter and hands it the visitor’s email address and the message, only when a code is sent (or when you click Send test). Nothing is sent to a provider you haven’t chosen. Their terms apply: Google , Microsoft , Zoho , Yahoo , SendGrid , Brevo , Mailgun , Amazon SES , Postmark .

No data is sent to any other third party. See WALoops’ Terms of Service and Privacy Policy .