WooCommerce WhatsApp OTP Login Plugin

WooCommerce WhatsApp OTP Login Plugin

The WooCommerce WhatsApp OTP Login plugin enables the admin to allow their store users to log in or register to the WooCommerce store Using their existing WhatsApp Mobile number.

Using this feature, customers can register themselves to the WooCommerce Store and also log in to their account using their WhatsApp Mobile number.

The admin can also log in to the store backend via WhatsApp OTP-based Authentication.

Note -

This module is compatible with WooCommerce’s new High-Performance Order Storage (HPOS) Feature

This plugin is now compatible with WooCommerce’s latest feature Cart and Checkout Blocks.

Check how to activate your WooCommerce plugin through the purchase code.

Why Use WooCommerce WhatsApp OTP Login Plugin?

Support

Dear Customers, if you have a question/query, please raise a ticket at webkul.uvdesk.com. We will do our best to answer as quickly as it is possible. Kindly do not give us a low rating without contacting support on the issue you’ve faced. We are always happy to help you.

Features of WooCommerce WhatsApp OTP Login Plugin

• Admin can log in to their account using WhatsApp OTP.

• Customers can also register or log in using WhatsApp OTP.

• Admin can enable/disable the authority to change the Mobile no.

• Eliminate the need to enter Store credentials for login.

• Set the length of the OTP received on your WhatsApp.

• Admin can set the custom message for Registration and Login.

• Eliminate the need to manage separate Email and password for the store.

Highlighted Features

1 – WhatsApp OTP-based Authentication

The WhatsApp OTP-based Authentication is more secure and eases the login process.

2 – New User Registration Via WhatsApp

The new user can register to the store using their WhatsApp No.

3 – Reduce Multiple Account

Prevent users from creating multiple accounts in the store.

4 – Update Mobile Number

The store admin can allow their customers to update their registered WhatsApp mobile No.

Business Use

The Woocommerce WhatsApp OTP login module offers a seamless login experience to the customers.

Most of the users are familiar with WhatsApp, and this builds the trust of the store users in the eCommerce store.

Even the store admin can log in to the store backend and authenticate himself using WhatsApp OTP-based authentication.

ChangeLog

"Initial release v 1.0.0" " Current release v 1.1.0" 

 = 1.1.0 - 2026-07-02 =  Added: WhatsApp Cloud API support as a gateway option. Added: Dedicated Analytics Dashboard to track WhatsApp feature usage and customer engagement. Added: Mandatory WhatsApp OTP verification during checkout for specific payment methods (e.g., Cash on Delivery). Added: 'Link WhatsApp Number' feature in the 'My Account' section for existing customers Added: Ability to export verified WhatsApp numbers to CSV. Added: Standalone WhatsApp Login Gutenberg block with WooCommerce Checkout Block compatibility. Added: Comprehensive End-to-End (E2E) testing suite using Playwright to ensure plugin stability. Added: Admin setting to configure custom OTP characters (e.g., Alphanumeric, Alphabetic). Added: Twilio Sandbox Code setting for easier testing in test mode. Added: Frontend notification banner instructing users to join Twilio sandbox during test mode. Tweak: Optimized frontend template (`wkwpl-form-field.php`) for improved accessibility, label associations, and removed inline styles. Tweak: Configurable UI/UX options for customizing the Login button and form template. Tweak: Rate limiting restricted to maximum 3 OTP messages per 15 minutes to prevent abuse. Tweak: Centralized OTP generation method to improve code maintainability (DRY principles). Tweak: Replaced deprecated `current_time()` usage with modern `current_datetime()`. Security: Implemented strict validation and output escaping across all frontend templates. Security: Replaced HTTP `geoplugin.net` with secure `WC_Geolocation::geolocate_ip()` and `ipapi.co` fallback. Security: Fixed IP spoofing vulnerability by securely validating `REMOTE_ADDR`. Security: Migrated from `wp_rand()` to cryptographically secure `random_int()` for OTP generation.

1.0.1   <pre>1.0.1   Added: Upgraded Twilio API for live environment. Added: Added count-down timer option in the configuration.  </pre>  <pre>1.0.0  Initial release </pre>