WALoops OTP Login

Add WhatsApp OTP login to WordPress in 2 minutes.

A password-free login and registration option, delivered over WhatsApp — works alongside your existing login form, on any theme, with or without WooCommerce. No password to remember, no password to reset, no password to leak.

Free forever — 100 OTPs/month

Get a free API key by creating a WALoops account from the plugin’s settings page (no credit card) and start sending real WhatsApp OTPs from WALoops’ shared WhatsApp number immediately.

Everything you need, nothing you don’t

• Adds, never replaces — sits alongside your normal login and registration forms as an extra option, never in place of them
• 3 ready-made designs — Modern, Minimal, and Card form styles, pick one in Settings, no CSS required
• Works in minutes — no Meta Developer account needed on the Free or Introduction (shared-number) plans
• Bring your own number — Introduction and Starter Ecommerce plans let you send from your own WhatsApp Business number
• WooCommerce checkout — offer WhatsApp OTP verification right at checkout on the Starter Ecommerce plan
• Email code login too — optionally offer a 6-digit code sent by email alongside (or instead of) WhatsApp; it uses your site’s normal email, needs no API key, and a new email address becomes a new account
• Shortcode-friendly — place the form anywhere with [wa_otp_login], or drag it on as a native Elementor widget or WPBakery Page Builder element
• Spam-proof your other forms — a “WhatsApp OTP Verify” field/tag for Contact Form 7, WPForms, Gravity Forms, and Formidable Forms blocks submission until the visitor’s number checks out (experimental for Ninja Forms — test before relying on it)
• Goes global — a country dial-code selector on every phone field, pre-filled from the visitor’s browser language and always changeable
• Fully translatable (text domain: waloops-otp-login)

Simple, WordPress-friendly pricing

Start free. Upgrade only when you actually need more volume or your own number.

• Free — $0/month. Everything you need to try WhatsApp OTP login on a live site: 100 OTPs/month from our shared number, all 3 form styles, login/register/shortcode placement.
• Introduction — $5/month. For sites outgrowing the free quota: 1,000 OTPs/month, use our shared number or connect your own, switch any time.
• Starter Ecommerce — $9.99/month. For high-traffic and WooCommerce sites: unlimited OTPs on your own connected WhatsApp Business number, checkout verification, and priority support.

How it works

1. Install and activate the plugin.
2. Go to Settings > WhatsApp OTP Login and click Create a free WALoops account — you’ll land straight on your API key. Paste it into the field on this same settings page.
3. Pick where the OTP option should appear (login page, registration page, WooCommerce checkout) — or drop the [wa_otp_login] shortcode anywhere.
4. Done. Visitors can now log in or register with just their WhatsApp number.
5. To verify a phone number on your own Contact Form 7, WPForms, Gravity Forms, or Formidable Forms form instead: add a [wa_otp_verify your-phone] tag in the CF7 form editor, or drag/add the “WhatsApp OTP Verify” field into the other three builders — no extra setup needed once your API key is saved.
6. Using Elementor or WPBakery Page Builder? Drag the “WhatsApp OTP Login” widget/element onto any page instead of using the shortcode.

External services

This plugin connects to WALoops’ WhatsApp OTP service (https://app.waloops.com/) to deliver one-time-password messages over WhatsApp. This connection is required for the plugin to work — there’s no way to send a WhatsApp message without it.

What is sent, and when:

• Creating a free WALoops account: when you click “Get Free API Key” on the settings page, the email address and WhatsApp number you typed, and your site’s URL, are sent to WALoops to create your account and return your API key. Nothing is sent until you click. If you also tick the optional box “Message me on WhatsApp to help me set this up” (unchecked by default), WALoops may send you a WhatsApp message on that number to help with setup; you can reply STOP at any time.
• When a visitor requests a verification code (login, registration, checkout, or a Contact Form 7 / WPForms field): their phone number is sent to WALoops so it can send them a WhatsApp message containing the code.
• When a visitor submits a code: their phone number and the code they entered are sent to WALoops to be checked.
• On the settings page: your account’s monthly usage is fetched from WALoops so it can be shown to you. If you choose to connect your own WhatsApp Business number, your Meta access token and phone number ID are also sent to WALoops, to verify and store for your account.

• Abandoned Cart Reminder (Starter plan, off by default — only shown to eligible accounts): once turned on, a shopper’s phone number, name, and cart contents (items, total, currency, coupon codes, checkout URL) are sent to WALoops after they enter a phone number at checkout and leave without ordering within the configured wait time, so it can send them a WhatsApp reminder. This is decided and timed entirely on your own site (WordPress schedules and cancels the check itself); nothing is sent to WALoops while a shopper is still actively checking out.

• Email code login (optional, off by default): the code is generated and checked entirely on your own site. Nothing about it is sent to WALoops.

Email delivery (Settings > Email delivery): by default the code email goes out through WordPress’s own wp_mail() (and any SMTP plugin you use), or PHP mail() if you pick it. If you instead pick an email provider (Gmail, Outlook / Microsoft 365, Zoho, Yahoo, SendGrid, Brevo, Mailgun, Amazon SES, Postmark) or your own SMTP server, the plugin logs in to that provider’s SMTP server with the credentials you enter and hands it the visitor’s email address and the message, only when a code is sent (or when you click Send test). Nothing is sent to a provider you haven’t chosen. Their terms apply: Google, Microsoft, Zoho, Yahoo, SendGrid, Brevo, Mailgun, Amazon SES, Postmark.

No data is sent to any other third party. See WALoops’ Terms of Service and Privacy Policy.