Title: Authyo Authentication and Notification for WooCommerce Author: Konceptwise Digital Media Pvt Ltd Published: July 24, 2025 Last modified: October 8, 2026 --- Search plugins ![](https://ps.w.org/authyo-otp-authentication-for-woocommerce/assets/banner-772x250. png?rev=3524271) ![](https://ps.w.org/authyo-otp-authentication-for-woocommerce/assets/icon-256x256. png?rev=3359585) # Authyo Authentication and Notification for WooCommerce By [Konceptwise Digital Media Pvt Ltd](https://profiles.wordpress.org/konceptwise/) [Download](https://downloads.wordpress.org/plugin/authyo-otp-authentication-for-woocommerce.1.0.21.zip) * [Details](https://en-au.wordpress.org/plugins/authyo-otp-authentication-for-woocommerce/#description) * [Reviews](https://en-au.wordpress.org/plugins/authyo-otp-authentication-for-woocommerce/#reviews) * [Installation](https://en-au.wordpress.org/plugins/authyo-otp-authentication-for-woocommerce/#installation) * [Development](https://en-au.wordpress.org/plugins/authyo-otp-authentication-for-woocommerce/#developers) [Support](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/) ## Description **Authyo Authentication and Notification for WooCommerce** lets your customers log in, register, and check out using a one-time password (OTP) — no password required. It also keeps customers informed at every step of their order with real-time notifications via Email, SMS, and WhatsApp. Built for WooCommerce stores that want to reduce friction, lower cart abandonment, and improve customer communication — all through a single plugin. #### Why Use OTP Authentication? Passwords cause real problems for online stores: forgotten credentials, account lockouts, and weak passwords that put customers at risk. OTP authentication solves all of this by sending a short verification code directly to your customer’s email or phone — no password to remember, no account to recover. The result: **a faster, safer checkout experience** that customers actually prefer. #### OTP Login & Registration Add passwordless login and registration to any page using simple shortcodes: * **`[authyo_login]`** — Adds an OTP-based login form to any page * **`[authyo_register]`** — Adds an OTP-based registration form to any page Customers enter their email address or mobile number, receive an OTP, and are logged in or registered instantly. No passwords involved. **Supported OTP delivery channels:** * 📧 **Email** — Delivered to the customer’s inbox * 💬 **WhatsApp** — Sent as a WhatsApp message * 📱 **SMS** — Sent as a text message * 📞 **Voice Call** — OTP read aloud via automated call You choose which channels to enable, set a priority channel, and configure automatic fallback so customers always receive their OTP even if one channel fails. #### OTP Verification at Checkout Optionally require customers to verify their email address or phone number before completing a purchase. This adds a layer of confirmation that the contact details provided are accurate — reducing failed deliveries, disputes, and fraudulent orders. The checkout OTP field is session-based (not form-based) for security, and works with both classic WooCommerce checkout and the newer Checkout Block. #### WooCommerce Order Notifications Keep customers informed automatically when their order status changes. Configure notification flows for any order event: * 🔄 Order Received (Pending) * ✅ Payment Confirmed (Processing) * 📦 Order Completed * ⏸ Order On Hold * ❌ Order Cancelled * 💸 Order Refunded * ⚠️ Payment Failed For each event, choose to notify via **Email**, **SMS**, or **WhatsApp** (or any combination). Notifications use pre-built templates from your Authyo dashboard. Enable or disable individual flows at any time without deleting them. #### Security & Rate Limiting * Nonce verification on all form submissions and AJAX requests * Rate limiting: maximum 5 OTP requests per 10 minutes per user * Configurable maximum OTP attempt limit (1–20 attempts) * Configurable lockout period after too many failed attempts (1–1440 minutes) * All inputs are sanitized and validated * OTP bypass mode for testing with whitelisted emails and phone numbers #### Configuration Options * **OTP length** — 4 to 8 digits * **OTP expiry** — 10 to 600 seconds * **Priority channel** — Choose which delivery method is tried first for mobile numbers * **Fallback channels** — Automatically retry with another channel if the primary one fails * **Country code management** — Restrict the phone country dropdown to specific countries or allow all * **Default country** — Pre-select a country code in the phone number field * **OTP activity log** — View and manage all OTP send/verify events from the admin panel #### Requirements This plugin connects to the **[Authyo.io](https://authyo.io)** API to send OTPs and notifications. A free Authyo account is required — sign up at [authyo.io](https://authyo.io), generate your API credentials, and paste them into the plugin settings. * WordPress 5.0 or higher * WooCommerce 5.0 or higher * PHP 7.4 or higher * A free Authyo.io account #### WooCommerce Compatibility * ✅ Compatible with WooCommerce High-Performance Order Storage (HPOS) * ✅ Compatible with WooCommerce Cart and Checkout Blocks * ✅ Tested with WooCommerce up to 9.0 ## Screenshots [⌊Login with OTP interface⌉⌊Login with OTP interface⌉[ Login with OTP interface [⌊OTP entry during checkout⌉⌊OTP entry during checkout⌉[ OTP entry during checkout [[ ## Installation 1. Upload the plugin folder to `/wp-content/plugins/`, or install it directly from the WordPress plugin directory. 2. Activate the plugin from **Plugins** in your WordPress admin. 3. Go to **Authyo OTP** in your WordPress admin menu. 4. Sign up at [authyo.io](https://authyo.io) and generate your API credentials (Client ID and Client Secret). 5. Enter your credentials on the **Settings** page and save. 6. Enable the OTP features you want: Login, Registration, Checkout, and/or Order Notifications. 7. Create pages for your login and registration forms and add the shortcodes `[authyo_login]` and `[authyo_register]`. 8. Configure notification flows under **Notification Flow** if you want order status notifications. ## FAQ ### Do I need to create an account somewhere to use this plugin? Yes. This plugin uses the Authyo.io API to send OTPs and notifications. You need a free account at [authyo.io](https://authyo.io). After signing up, generate your Client ID and Client Secret from the Authyo dashboard and enter them in the plugin settings. ### Is Authyo.io free to use? Authyo.io offers a free plan. Paid plans are available for higher volumes. Visit [authyo.io](https://authyo.io) for current pricing details. ### Which channels can I use to send OTPs? You can send OTPs via Email, SMS, WhatsApp, and Voice Call. Enable one or multiple channels in the plugin settings. You can also set a priority channel and configure automatic fallback so if one channel fails, another is tried automatically. ### Can customers log in with a phone number instead of an email address? Yes. Customers can enter either an email address or a mobile phone number. The plugin automatically detects which one is entered and routes the OTP to the right channel. ### Does it support international phone numbers? Yes. The phone number field includes a country code selector with support for countries worldwide. The available countries are loaded from the Authyo API and cached locally. You can also restrict the dropdown to specific countries from the plugin settings. ### Will it work with my WooCommerce theme? Yes. The plugin includes universal theme compatibility CSS that overrides common theme conflicts. The forms are designed to adapt to your theme’s styling. The checkout OTP field integrates with both the classic WooCommerce checkout and the Gutenberg- based Checkout Block. ### Can I keep password login alongside OTP login? Yes. The OTP login form is added only to pages where you place the shortcode. The default WooCommerce login form remains untouched unless you choose to replace or hide it. Both methods can coexist. ### What happens if a customer does not receive their OTP? If the primary delivery channel fails, the plugin can automatically retry using a fallback channel (for example, trying SMS if WhatsApp fails). Customers also see a “Try another method” option in the form to manually request the OTP via a different channel. ### Can I set how long an OTP is valid? Yes. You can set the OTP expiry time between 10 and 600 seconds from the plugin settings. The default is 60 seconds. ### What happens if a customer enters the wrong OTP too many times? You can configure a maximum attempt limit (1–20 attempts) and a lockout period ( 1–1440 minutes). Once the limit is exceeded, the customer is temporarily blocked from attempting again. The counter resets automatically after the lockout period. ### Is there a log of all OTP activity? Yes. The plugin logs every OTP send and verification attempt. You can view the full log under **Authyo OTP OTP Logs** in your admin panel, including the email/phone used, status, IP address, and timestamp. Logs can be bulk deleted. ### Does checkout OTP verification slow down the checkout process? No. Verification happens via AJAX in the background. The customer enters and submits their OTP before placing the order, so there is no delay at the point of order creation. Verification state is stored in a server-side session, not in the form, so it cannot be bypassed by manipulating form data. ### Can I test the plugin without sending real OTPs? Yes. The plugin includes a testing bypass mode. You can add specific email addresses and phone numbers to a whitelist — for those entries, the OTP step is skipped and verification always succeeds. This lets you test your checkout flow without consuming API credits. ### Does it work with the latest version of WooCommerce? Yes. The plugin is tested with the latest WooCommerce release and declares compatibility with WooCommerce HPOS (High-Performance Order Storage) and the WooCommerce Checkout Block. ## Reviews ![](https://secure.gravatar.com/avatar/942affe9f807b94df64e7f6271f5b83ddf18a9527e8093e487f88d58cbfd909f? s=60&d=retro&r=g) ### 󠀁[Simple login for everyone](https://wordpress.org/support/topic/simple-login-for-everyone/)󠁿 [arpitasolanki66](https://profiles.wordpress.org/arpitasolanki66/) December 6, 2025 I’ve been using this plugin for the past five days and it has completely improved the login and sign‑up experience on my store. Customers no longer need to remember passwords – now they can register or log in instantly using just their email or phone number, with a quick OTP for confirmation. The process is fast, effortless and saves valuable time. My customers love how simple it is to use and their feedback has been overwhelmingly positive. [ Read all 3 reviews ](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/) ## Contributors & Developers “Authyo Authentication and Notification for WooCommerce” is open source software. The following people have contributed to this plugin. Contributors * [ Konceptwise Digital Media Pvt Ltd ](https://profiles.wordpress.org/konceptwise/) [Translate “Authyo Authentication and Notification for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/authyo-otp-authentication-for-woocommerce) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/authyo-otp-authentication-for-woocommerce/), check out the [SVN repository](https://plugins.svn.wordpress.org/authyo-otp-authentication-for-woocommerce/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/authyo-otp-authentication-for-woocommerce/) by [RSS](https://plugins.trac.wordpress.org/log/authyo-otp-authentication-for-woocommerce/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.21 * Performance improvements * Updated “Tested up to” to WordPress 7.1.3 #### 1.0.20 * Fixed “Security check failed. Please try again.” error. * Fixed the login and registration forms. #### 1.0.19 * Performance improvements #### 1.0.18 * Performance improvements * Readme file updated #### 1.0.17 * Performance improvements #### 1.0.16 * Fixed WordPress coding standards compliance issues * Updated “Tested up to” to WordPress 7.0 #### 1.0.15 * Reduced unnecessary database queries on page load for improved performance on high-traffic sites * Optimised country code cache handling to reduce API calls #### 1.0.14 * Improved asset loading — scripts and styles now load only on pages where OTP forms are present * Minor improvements to AJAX response handling #### 1.0.13 * Improved phone number processing to better handle international formats * Stability improvements for the fallback channel selection logic #### 1.0.12 * Fixed an edge case where the OTP attempt counter could fail to reset after a successful login * Fixed a display issue with the country code selector on certain themes #### 1.0.11 * Added WooCommerce order status notifications via Email, SMS, and WhatsApp * Added Notification Flow admin interface with per-event configuration * Added support for selecting multiple notification channels per order event * Added toggle to enable or disable individual notification flows without deleting them * Added enable/disable setting for order notifications in Basic Settings #### 1.0.10 * Improved reliability of the order webhook module * Minor performance improvements #### 1.0.9 * Improved deduplication logic for order status notification hooks to prevent duplicate sends * Code quality improvements #### 1.0.8 * Refactored SDK class for cleaner API error handling * Improved JSON response parsing to support additional Authyo API response structures #### 1.0.7 * Added OTP verification at the WooCommerce checkout page * Supports both email and phone OTP at checkout * Session-based verification for improved security #### 1.0.6 * Improved country code detection for mobile number inputs * Minor admin UI improvements #### 1.0.5 * Added configurable maximum OTP attempt limit (1–20 attempts) * Added configurable lockout period after failed attempts (1–1440 minutes) * Fixed WordPress plugin guideline compliance issues * Improved database query security * Enhanced internationalisation support #### 1.0.4 * Added automatic fallback channel support — retries with next available channel on failure * Added OTP bypass mode for testing with whitelisted emails and phone numbers * Improved plugin stability and security #### 1.0.3 * Improved error handling for API timeouts and network failures * Fixed compatibility issue with certain caching plugins #### 1.0.0 * Initial release — OTP login and registration via Email, SMS, WhatsApp, and Voice Call ## Meta * Version **1.0.21** * Last updated **1 week ago** * Active installations **10+** * WordPress Version ** 5.0 or higher ** * Tested up to **7.1.3** * PHP Version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/authyo-otp-authentication-for-woocommerce/) * Tags * [otp](https://en-au.wordpress.org/plugins/tags/otp/)[passwordless login](https://en-au.wordpress.org/plugins/tags/passwordless-login/) [sms](https://en-au.wordpress.org/plugins/tags/sms/)[whatsapp](https://en-au.wordpress.org/plugins/tags/whatsapp/) [woocommerce](https://en-au.wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://en-au.wordpress.org/plugins/authyo-otp-authentication-for-woocommerce/advanced/) ## Ratings 4 out of 5 stars. * [ 0 5-star reviews ](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/?filter=5) * [ 1 4-star review ](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/reviews/) ## Contributors * [ Konceptwise Digital Media Pvt Ltd ](https://profiles.wordpress.org/konceptwise/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/authyo-otp-authentication-for-woocommerce/)