WhatsApp OTP: Sending Verification Codes on WhatsApp
One-time passwords are among the most common business messages. WhatsApp offers a dedicated authentication template for them, with a button that copies or autofills the code. It's a strong option where WhatsApp is widely used and SMS is costly or unreliable.
In ShortSend codes with an approved WhatsApp authentication template. The text is preset by Meta, you add the code, an optional security note and expiry, and a copy-code or one-tap autofill button. Keep SMS as a fallback.
How Authentication Templates Work
- The body is preset: "<code> is your verification code", with an optional "For your security, do not share this code" and an optional expiry line (Bird docs).
- A copy-code button copies the code to the clipboard; a one-tap autofill button passes it straight to your Android app (Bird docs).
- URLs, media and emojis aren't allowed in authentication templates (Bird docs).
- The template must be approved before use, and the code is set as the only variable at send time (Twilio docs).
WhatsApp vs SMS for Codes
| SMS | ||
|---|---|---|
| Reach | Only people with WhatsApp | Almost every mobile phone |
| Sender | Business profile, optionally verified | Sender ID or number, varies by country |
| Fraud exposure | Not exposed to SMS traffic pumping | Exposed to artificially inflated traffic |
| Cost | Authentication category pricing per country | Per-message carrier pricing per country |
Good Practice
- Let customers choose WhatsApp or SMS, and fall back to SMS if WhatsApp isn't delivered within a short time.
- Rate-limit code requests per number and per IP address.
- Keep codes short-lived and single-use.
- Never send codes in marketing templates — use the authentication category.
FAQ
Can I write my own text for a WhatsApp OTP?
No. Authentication templates use preset text from Meta. You can add the optional security note and expiry line, and choose a copy-code or one-tap button.
Is WhatsApp OTP cheaper than SMS?
In many countries it is, but prices vary. Compare Meta's authentication rates with SMS rates for the countries you serve.
What is one-tap autofill?
A button that passes the code directly to your Android app so the customer doesn't type or paste it. It needs extra setup in your app.
Should I keep SMS as a backup?
Yes. Not everyone has WhatsApp, so fall back to SMS when a WhatsApp code isn't delivered.
Not Sure Which Fits?
Find the right setup for your team, or start your own Arino One Studio.
Start with the free Remix or a managed plan from $99/month. Providers bill you directly. Compare Plans