Description
Login with WhatsApp (Reverse OTP) allows users to authenticate by sending a message via WhatsApp to the admin number instead of receiving a code. This unique method, called Reverse OTP, ensures that the user is the initiator of the conversation, drastically reducing the chances of the admin number being blocked by WhatsApp.
This plugin is ideal for login, membership, or community-based WordPress websites where mobile-based verification is preferred over email/password.
Third-party Service
This plugin requires a third-party service to function properly. It integrates with the external Whatsiplus API in order to provide OTP-based login functionality via WhatsApp.
The plugin communicates with the following endpoints from the service:
- API Base URL: https://api.whatsiplus.com
- Send Message: https://api.whatsiplus.com/sendMsg
- Receive Message: https://api.whatsiplus.com/receivedMessages
- Service Settings: https://api.whatsiplus.com/serviceSettings
What data is sent and when:
- During login or OTP request: The plugin sends the user’s phone number (as entered by the user) and your API key to the Whatsiplus service in order to initiate OTP verification.
- During plugin configuration: The plugin sends your API key to verify service status and fetch related settings (such as connected number and country code).
No other personal data is transmitted to Whatsiplus.
Requirements:
This plugin will not work without a valid Whatsiplus API key. You can obtain a key by registering at https://whatsiplus.com.
Service provider details:
- API Service Provider: Whatsiplus.com
- Documentation: https://docs.whatsiplus.com
- Terms of Service: https://whatsiplus.com/terms-and-conditions/
- Privacy Policy: https://whatsiplus.com/privacy-policy/
How it Works
- User enters their phone number in the login form.
- The system generates a unique OTP.
- The user is instructed to send that OTP to the admin’s WhatsApp number.
- Once received and verified, the user is logged in securely.
Key Features
- ✅ Let users log in without a password — via WhatsApp.
- 🔒 Reverse OTP system — prevents your WhatsApp number from being blocked.
- 🔎 Automatically detects OTP sent by users to Whatsiplus.
- 📸 Users can scan a QR Code to quickly open WhatsApp with their unique code.
- 🔗 One-click direct WhatsApp link — no need to type the code manually.
- 💬 Sends welcome messages after login.
- 📱 WooCommerce compatible (but not required).
- 📊 Built-in log system to track login attempts.
- 🔧 Admin can choose which user meta field contains the phone number.
- 🌍 Default country code support.
- 🌐 REST API endpoints to support external apps (mobile, PWA).
- 🧩 Includes Widget and Shortcode for login anywhere on your site.
- 🛠️ Supports custom user fields (e.g. contact_number, mobile, billing_phone, etc.)
REST API
Two REST endpoints are available for developers:
POST /wp-json/reverse-otp/v1/request- Input:
{ "phone": "1530xxxxxxx" } - Output:
OTP code + WhatsApp link + expires_in
- Input:
POST /wp-json/reverse-otp/v1/verify- Input:
{ "phone": "...", "code": "..." } - Output: Auth status (if successful, user will be logged in)
- Input:
Screenshots
Login form shortcode display. 
WhatsApp message with OTP. 
Admin settings page. 
Logs page to track verification attempts.
Installation
- Upload the plugin files to
/wp-content/plugins/login-with-whatsiplus-reverse-otpor install directly through the WordPress plugin screen. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings > Whatsiplus Login OTP and enter your Whatsiplus API Key.
- Use
[lwro_login_otp]shortcode in a page or widget to display the login form. - Done!
FAQ
-
Why is this called Reverse OTP?
-
Because instead of sending the OTP to the user, the user sends the OTP to you — on WhatsApp. This prevents spam detection and your number won’t get blocked.
-
Is this plugin safe and secure?
-
Yes. Only a valid OTP sent to your registered WhatsApp number from a matching user phone number is accepted.
-
Does it require WooCommerce?
-
No. WooCommerce is optional. The plugin can detect phone numbers from standard or custom user meta fields.
-
Can I use it for mobile apps?
-
Yes! REST API support is included so you can integrate it into mobile apps or external platforms.
-
Can I customize the welcome message?
-
Yes, you can change the welcome message from the plugin settings.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Login with Whatsiplus (Reverse OTP)” is open source software. The following people have contributed to this plugin.
Contributors
“Login with Whatsiplus (Reverse OTP)” has been translated into 1 locale. Thank you to the translators for their contributions.
Translate “Login with Whatsiplus (Reverse OTP)” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.2
- Fixed QR code cache issue (QR always matches the displayed code)
- Prevented already logged-in users from re-logging with WhatsApp
1.0.1
- Fixed some bugs
- Changed the page title to WhatsApp Login
1.0.0
- Initial release.
- Login with WhatsApp using Reverse OTP
- Admin settings panel
- Built-in log viewer
- REST API for login and verify
- WooCommerce and custom phone fields support
- QR code integration
- Auto-create login page
- Widget and shortcode support