Beschrijving
Login with WhatsApp (Reverse OTP) allows users to authenticate by sending a message via WhatsApp to the admin number instead of receiving a code. This unique method, called Reverse OTP, ensures that the user is the initiator of the conversation, drastically reducing the chances of the admin number being blocked by WhatsApp.
This plugin is ideal for login, membership, or community-based WordPress websites where mobile-based verification is preferred over email/password.
Third-party Service
This plugin requires a third-party service to function properly. It integrates with the external Whatsiplus API in order to provide OTP-based login functionality via WhatsApp.
The plugin communicates with the following endpoints from the service:
- API Base URL: https://api.whatsiplus.com
- Send Message: https://api.whatsiplus.com/sendMsg
- Receive Message: https://api.whatsiplus.com/receivedMessages
- Service Settings: https://api.whatsiplus.com/serviceSettings
What data is sent and when:
- During login or OTP request: The plugin sends the user’s phone number (as entered by the user) and your API key to the Whatsiplus service in order to initiate OTP verification.
- During plugin configuration: The plugin sends your API key to verify service status and fetch related settings (such as connected number and country code).
No other personal data is transmitted to Whatsiplus.
Requirements:
This plugin will not work without a valid Whatsiplus API key. You can obtain a key by registering at https://whatsiplus.com.
Service provider details:
- API Service Provider: Whatsiplus.com
- Documentation: https://docs.whatsiplus.com
- Terms of Service: https://whatsiplus.com/terms-and-conditions/
- Privacy Policy: https://whatsiplus.com/privacy-policy/
How it Works
- User enters their phone number in the login form.
- The system generates a unique OTP.
- The user is instructed to send that OTP to the admin’s WhatsApp number.
- Once received and verified, the user is logged in securely.
Key Features
- ✅ Let users log in without a password — via WhatsApp.
- 🔒 Reverse OTP system — prevents your WhatsApp number from being blocked.
- 🔎 Automatically detects OTP sent by users to Whatsiplus.
- 📸 Users can scan a QR Code to quickly open WhatsApp with their unique code.
- 🔗 One-click direct WhatsApp link — no need to type the code manually.
- 💬 Sends welcome messages after login.
- 📱 WooCommerce compatible (but not required).
- 📊 Built-in log system to track login attempts.
- 🔧 Admin can choose which user meta field contains the phone number.
- 🌍 Default country code support.
- 🌐 REST API endpoints to support external apps (mobile, PWA).
- 🧩 Includes Widget and Shortcode for login anywhere on your site.
- 🛠️ Supports custom user fields (e.g. contact_number, mobile, billing_phone, etc.)
REST API
Two REST endpoints are available for developers:
POST /wp-json/reverse-otp/v1/request- Input:
{ "phone": "1530xxxxxxx" } - Output:
OTP code + WhatsApp link + expires_in
- Input:
POST /wp-json/reverse-otp/v1/verify- Input:
{ "phone": "...", "code": "..." } - Output: Auth status (if successful, user will be logged in)
- Input:
Schermafbeeldingen
Login form shortcode display. 
WhatsApp message with OTP. 
Admin settings page. 
Logs page to track verification attempts.
Installatie
- Upload the plugin files to
/wp-content/plugins/login-with-whatsiplus-reverse-otpor install directly through the WordPress plugin screen. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings > Whatsiplus Login OTP and enter your Whatsiplus API Key.
- Use
[lwro_login_otp]shortcode in a page or widget to display the login form. - Done!
FAQ
-
Why is this called Reverse OTP?
-
Because instead of sending the OTP to the user, the user sends the OTP to you — on WhatsApp. This prevents spam detection and your number won’t get blocked.
-
Is this plugin safe and secure?
-
Yes. Only a valid OTP sent to your registered WhatsApp number from a matching user phone number is accepted.
-
Does it require WooCommerce?
-
No. WooCommerce is optional. The plugin can detect phone numbers from standard or custom user meta fields.
-
Can I use it for mobile apps?
-
Yes! REST API support is included so you can integrate it into mobile apps or external platforms.
-
Can I customize the welcome message?
-
Yes, you can change the welcome message from the plugin settings.
Beoordelingen
Er zijn geen beoordelingen voor deze plugin.
Bijdragers & ontwikkelaars
“Login with Whatsiplus (Reverse OTP)” is open source software. De volgende personen hebben bijgedragen aan deze plugin.
Bijdragers
“Login with Whatsiplus (Reverse OTP)” is vertaald in 1 taal. Dank voor de vertalers voor hun bijdragen.
Vertaal “Login with Whatsiplus (Reverse OTP)” naar jouw taal.
Interesse in de ontwikkeling?
Bekijk de code, haal de SVN repository op, of abonneer je op het ontwikkellog via RSS.
Changelog
1.0.3
- Resolved WordPress Site Health errors caused by long-running PHP sessions
- Implemented safe session handling with immediate session_write_close() to prevent session lock issues
- Improved compatibility with loopback requests, REST API, and WP-Cron
1.0.2
- Fixed QR code cache issue (QR always matches the displayed code)
- Prevented already logged-in users from re-logging with WhatsApp
1.0.1
- Fixed some bugs
- Changed the page title to WhatsApp Login
1.0.0
- Initial release.
- Login with WhatsApp using Reverse OTP
- Admin settings panel
- Built-in log viewer
- REST API for login and verify
- WooCommerce and custom phone fields support
- QR code integration
- Auto-create login page
- Widget and shortcode support