Authyo Authentication and Notification for WooCommerce
Replace passwords with OTP login for WooCommerce. Verify customers at checkout and send order notifications via Email, SMS, WhatsApp, and Voice Call.
Use with caution
Authyo Authentication and Notif… works, but test it on a staging site before relying on it in 2026. It runs on 10+ sites, is rated 4/5 and was last updated 1 month ago, and scores 61/100 on our health check.
- Small user base (10+ active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Authyo Authentication and N… stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| otp | #50 |
| passwordless login | #66 |
| sms | >100 |
| >100 | |
| woocommerce | >100 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 4 from 1 reviews
About Authyo Authentication and Notification…
From the official readme · v1.0.20Description
Authyo Authentication and Notification for WooCommerce lets your customers log in, register, and check out using a one-time password (OTP) — no password required. It also keeps customers informed at every step of their order with real-time notifications via Email, SMS, and WhatsApp.
Built for WooCommerce stores that want to reduce friction, lower cart abandonment, and improve customer communication — all through a single plugin.
Why Use OTP Authentication?
Passwords cause real problems for online stores: forgotten credentials, account lockouts, and weak passwords that put customers at risk. OTP authentication solves all of this by sending a short verification code directly to your customer’s email or phone — no password to remember, no account to recover.
The result: a faster, safer checkout experience that customers actually prefer.
OTP Login & Registration
Add passwordless login and registration to any page using simple shortcodes:
[authyo_login]— Adds an OTP-based login form to any page[authyo_register]— Adds an OTP-based registration form to any page
Customers enter their email address or mobile number, receive an OTP, and are logged in or registered instantly. No passwords involved.
Supported OTP delivery channels:
- 📧 Email — Delivered to the customer’s inbox
- 💬 WhatsApp — Sent as a WhatsApp message
- 📱 SMS — Sent as a text message
- 📞 Voice Call — OTP read aloud via automated call
You choose which channels to enable, set a priority channel, and configure automatic fallback so customers always receive their OTP even if one channel fails.
OTP Verification at Checkout
Optionally require customers to verify their email address or phone number before completing a purchase. This adds a layer of confirmation that the contact details provided are accurate — reducing failed deliveries, disputes, and fraudulent orders.
The checkout OTP field is session-based (not form-based) for security, and works with both classic WooCommerce checkout and the newer Checkout Block.
WooCommerce Order Notifications
Keep customers informed automatically when their order status changes. Configure notification flows for any order event:
- 🔄 Order Received (Pending)
- ✅ Payment Confirmed (Processing)
- 📦 Order Completed
- ⏸ Order On Hold
- ❌ Order Cancelled
- 💸 Order Refunded
- ⚠️ Payment Failed
For each event, choose to notify via Email, SMS, or WhatsApp (or any combination). Notifications use pre-built templates from your Authyo dashboard. Enable or disable individual flows at any time without deleting them.
Security & Rate Limiting
- Nonce verification on all form submissions and AJAX requests
- Rate limiting: maximum 5 OTP requests per 10 minutes per user
- Configurable maximum OTP attempt limit (1–20 attempts)
- Configurable lockout period after too many failed attempts (1–1440 minutes)
- All inputs are sanitized and validated
- OTP bypass mode for testing with whitelisted emails and phone numbers
Configuration Options
- OTP length — 4 to 8 digits
- OTP expiry — 10 to 600 seconds
- Priority channel — Choose which delivery method is tried first for mobile numbers
- Fallback channels — Automatically retry with another channel if the primary one fails
- Country code management — Restrict the phone country dropdown to specific countries or allow all
- Default country — Pre-select a country code in the phone number field
- OTP activity log — View and manage all OTP send/verify events from the admin panel
Requirements
This plugin connects to the Authyo.io API to send OTPs and notifications. A free Authyo account is required — sign up at authyo.io, generate your API credentials, and paste them into the plugin settings.
- WordPress 5.0 or higher
- WooCommerce 5.0 or higher
- PHP 7.4 or higher
- A free Authyo.io account
WooCommerce Compatibility
- ✅ Compatible with WooCommerce High-Performance Order Storage (HPOS)
- ✅ Compatible with WooCommerce Cart and Checkout Blocks
- ✅ Tested with WooCommerce up to 9.0
Installation
- Upload the plugin folder to
/wp-content/plugins/, or install it directly from the WordPress plugin directory. - Activate the plugin from Plugins in your WordPress admin.
- Go to Authyo OTP in your WordPress admin menu.
- Sign up at authyo.io and generate your API credentials (Client ID and Client Secret).
- Enter your credentials on the Settings page and save.
- Enable the OTP features you want: Login, Registration, Checkout, and/or Order Notifications.
- Create pages for your login and registration forms and add the shortcodes
[authyo_login]and[authyo_register]. - Configure notification flows under Notification Flow if you want order status notifications.
Frequently asked questions
Do I need to create an account somewhere to use this plugin?
Yes. This plugin uses the Authyo.io API to send OTPs and notifications. You need a free account at authyo.io. After signing up, generate your Client ID and Client Secret from the Authyo dashboard and enter them in the plugin settings.
Is Authyo.io free to use?
Authyo.io offers a free plan. Paid plans are available for higher volumes. Visit authyo.io for current pricing details.
Which channels can I use to send OTPs?
You can send OTPs via Email, SMS, WhatsApp, and Voice Call. Enable one or multiple channels in the plugin settings. You can also set a priority channel and configure automatic fallback so if one channel fails, another is tried automatically.
Can customers log in with a phone number instead of an email address?
Yes. Customers can enter either an email address or a mobile phone number. The plugin automatically detects which one is entered and routes the OTP to the right channel.
Does it support international phone numbers?
Yes. The phone number field includes a country code selector with support for countries worldwide. The available countries are loaded from the Authyo API and cached locally. You can also restrict the dropdown to specific countries from the plugin settings.
Will it work with my WooCommerce theme?
Yes. The plugin includes universal theme compatibility CSS that overrides common theme conflicts. The forms are designed to adapt to your theme’s styling. The checkout OTP field integrates with both the classic WooCommerce checkout and the Gutenberg-based Checkout Block.
Can I keep password login alongside OTP login?
Yes. The OTP login form is added only to pages where you place the shortcode. The default WooCommerce login form remains untouched unless you choose to replace or hide it. Both methods can coexist.
What happens if a customer does not receive their OTP?
If the primary delivery channel fails, the plugin can automatically retry using a fallback channel (for example, trying SMS if WhatsApp fails). Customers also see a “Try another method” option in the form to manually request the OTP via a different channel.
Can I set how long an OTP is valid?
Yes. You can set the OTP expiry time between 10 and 600 seconds from the plugin settings. The default is 60 seconds.
What happens if a customer enters the wrong OTP too many times?
You can configure a maximum attempt limit (1–20 attempts) and a lockout period (1–1440 minutes). Once the limit is exceeded, the customer is temporarily blocked from attempting again. The counter resets automatically after the lockout period.
Is there a log of all OTP activity?
Yes. The plugin logs every OTP send and verification attempt. You can view the full log under Authyo OTP → OTP Logs in your admin panel, including the email/phone used, status, IP address, and timestamp. Logs can be bulk deleted.
Does checkout OTP verification slow down the checkout process?
No. Verification happens via AJAX in the background. The customer enters and submits their OTP before placing the order, so there is no delay at the point of order creation. Verification state is stored in a server-side session, not in the form, so it cannot be bypassed by manipulating form data.
Can I test the plugin without sending real OTPs?
Yes. The plugin includes a testing bypass mode. You can add specific email addresses and phone numbers to a whitelist — for those entries, the OTP step is skipped and verification always succeeds. This lets you test your checkout flow without consuming API credits.
Does it work with the latest version of WooCommerce?
Yes. The plugin is tested with the latest WooCommerce release and declares compatibility with WooCommerce HPOS (High-Performance Order Storage) and the WooCommerce Checkout Block.
Changelog
Fixes WordPress coding standards warnings and updates compatibility to WordPress 7.0.
1.0.20
- Fixed “Security check failed. Please try again.” error.
- Fixed the login and registration forms.
1.0.19
- Performance improvements
1.0.18
- Performance improvements
- Readme file updated
1.0.17
- Performance improvements
1.0.16
- Fixed WordPress coding standards compliance issues
- Updated “Tested up to” to WordPress 7.0
1.0.15
- Reduced unnecessary database queries on page load for improved performance on high-traffic sites
- Optimised country code cache handling to reduce API calls
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Authyo Authentication and Not… alternatives
All otp plugins →FAQ
Authyo Authentication and Notificat…: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 29, 2026
Is Authyo Authentication and Notif… free?
Yes. Authyo Authentication and Notif… is free to download and use from the official WordPress.org plugin directory.
Is Authyo Authentication and Notif… safe to use in 2026?
Authyo Authentication and Notif… works, but test it on a staging site before relying on it in 2026. It runs on 10+ sites, is rated 4/5 and was last updated 1 month ago, and scores 61/100 on our health check.
How many websites use Authyo Authentication and Notif…?
Authyo Authentication and Notif… is active on 10+ WordPress websites and has been downloaded 1,889 times since it launched in July 2025. It was downloaded 109 times in the last 30 days.
Does Authyo Authentication and Notif… work with WordPress 7.1?
Authyo Authentication and Notif… is officially tested up to WordPress 7.0.6, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
What PHP version does Authyo Authentication and Notif… need?
Authyo Authentication and Notif… requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Authyo Authentication and Notif… last updated?
The latest version, 1.0.20, was released on August 17, 2026 (1 month ago).
Who makes Authyo Authentication and Notif…?
Authyo Authentication and Notif… is developed and maintained by Konceptwise Digital Media Pvt Ltd.
What are the best alternatives to Authyo Authentication and Notif…?
The most popular alternatives to Authyo Authentication and Notif… are Google Authenticator (20K+ installs), miniOrange OTP Login, Verif… (5K+ installs) and پینوا | Pinova (1K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card


