About this plugin
Authyo Authentication and Notification for WooCommerce lets your customers log in, register, and check out using a one-time password (OTP) — no password required. It also keeps customers informed at every step of their order with real-time notifications via Email, SMS, and WhatsApp.
Built for WooCommerce stores that want to reduce friction, lower cart abandonment, and improve customer communication — all through a single plugin.
Why Use OTP Authentication?
Passwords cause real problems for online stores: forgotten credentials, account lockouts, and weak passwords that put customers at risk. OTP authentication solves all of this by sending a short verification code directly to your customer’s email or phone — no password to remember, no account to recover.
The result: a faster, safer checkout experience that customers actually prefer.
OTP Login & Registration
Add passwordless login and registration to any page using simple shortcodes:
- [authyo_login] — Adds an OTP-based login form to any page
- [authyo_register] — Adds an OTP-based registration form to any page
Customers enter their email address or mobile number, receive an OTP, and are logged in or registered instantly. No passwords involved.
Supported OTP delivery channels:
- 📧 Email — Delivered to the customer’s inbox
- 💬 WhatsApp — Sent as a WhatsApp message
- 📱 SMS — Sent as a text message
- 📞 Voice Call — OTP read aloud via automated call
You choose which channels to enable, set a priority channel, and configure automatic fallback so customers always receive their OTP even if one channel fails.
OTP Verification at Checkout
Optionally require customers to verify their email address or phone number before completing a purchase. This adds a layer of confirmation that the contact details provided are accurate — reducing failed deliveries, disputes, and fraudulent orders.
The checkout OTP field is session-based (not form-based) for security, and works with both classic WooCommerce checkout and the newer Checkout Block.
WooCommerce Order Notifications
Keep customers informed automatically when their order status changes. Configure notification flows for any order event:
- 🔄 Order Received (Pending)
- ✅ Payment Confirmed (Processing)
- 📦 Order Completed
- ⏸ Order On Hold
- ❌ Order Cancelled
- 💸 Order Refunded
- ⚠️ Payment Failed
For each event, choose to notify via Email, SMS, or WhatsApp (or any combination). Notifications use pre-built templates from your Authyo dashboard. Enable or disable individual flows at any time without deleting them.
Security & Rate Limiting
- Nonce verification on all form submissions and AJAX requests
- Rate limiting: maximum 5 OTP requests per 10 minutes per user
- Configurable maximum OTP attempt limit (1–20 attempts)
- Configurable lockout period after too many failed attempts (1–1440 minutes)
- All inputs are sanitized and validated
- OTP bypass mode for testing with whitelisted emails and phone numbers
Configuration Options
- OTP length — 4 to 8 digits
- OTP expiry — 10 to 600 seconds
- Priority channel — Choose which delivery method is tried first for mobile numbers
- Fallback channels — Automatically retry with another channel if the primary one fails
- Country code management — Restrict the phone country dropdown to specific countries or allow all
- Default country — Pre-select a country code in the phone number field
- OTP activity log — View and manage all OTP send/verify events from the admin panel
Requirements
io API to send OTPs and notifications. io, generate your API credentials, and paste them into the plugin settings.
- WordPress 5.0 or higher
- WooCommerce 5.0 or higher
- PHP 7.4 or higher
- A free Authyo.io account
WooCommerce Compatibility
- ✅ Compatible with WooCommerce High-Performance Order Storage (HPOS)
- ✅ Compatible with WooCommerce Cart and Checkout Blocks
- ✅ Tested with WooCommerce up to 9.0