WALoops OTP Login

WhatsApp OTP Login adds a one-time-password login and registration option — delivered over WhatsApp — to any WordPress site. It sits alongside your existing username/password login; it never replaces it.

Free forever, 100 OTPs/month

Get a free API key by creating a WALoops account from the plugin’s settings page (no credit card) and start sending real WhatsApp OTPs from WALoops’ shared WhatsApp number immediately.

Features

• Adds a WhatsApp OTP option to the login form, registration form, and (optionally) the WooCommerce checkout page
• [wa_otp_login] shortcode to place the form anywhere
• Three built-in front-end designs: Modern, Minimal, Card
• Free plan: 100 OTPs/month from our shared WhatsApp number
• Introduction plan ($5/mo): 1,000 OTPs/month, use our number or connect your own
• Starter Ecommerce plan ($9.99/mo): unlimited OTPs, using your own connected WhatsApp Business number
• Works out of the box — no Meta Developer account needed on the Free or Introduction (shared-number) plans
• Fully translatable (text domain: waloops-otp-login)

How it works

1. Install and activate the plugin.
2. Go to Settings > WhatsApp OTP Login and click Create a free WALoops account — you’ll land straight on your API key. Paste it into the field on this same settings page.
3. Pick where the OTP option should appear (login page, registration page, WooCommerce checkout) — or drop the [wa_otp_login] shortcode anywhere.
4. Done. Visitors can now log in or register with just their WhatsApp number.

External services

This plugin connects to the WALoops WhatsApp OTP API (https://app.waloops.com/api/otp/), operated by WALoops, to deliver one-time-password messages over WhatsApp. This is required for the plugin’s core functionality — there is no local/offline way to send a WhatsApp message.

What is sent, and when:

• When you click “Create a free WALoops account”: you’re taken to app.waloops.com to register/log in — nothing is sent from this plugin at that point. Once you’re logged in there, your API key is generated and shown to you to paste back into this settings page.
• When a visitor requests a login code: the phone number they entered is sent to https://app.waloops.com/api/otp/send.php, which triggers a WhatsApp message to that number.
• When a visitor submits a code: the phone number and the 6-digit code they entered are sent to https://app.waloops.com/api/otp/verify.php to check whether it’s correct.
• On the settings page: your account’s monthly usage is read from https://app.waloops.com/api/otp/usage.php, and — only if you choose to connect your own WhatsApp Business number — your Meta access token and phone number ID are sent to https://app.waloops.com/api/otp/connect_number.php to verify and store them for your account.

No data is sent to any other third party. See WALoops’ Terms of Service and Privacy Policy.