Description

TRC OTP Login lets your visitors log in, register and reset their password with a one-time code sent to their WhatsApp number. It works on its own: no other login plugin is needed.

Login with a WhatsApp code, with an optional password login (phone number or email).
Registration verified by WhatsApp: name, email and password can each be required, optional or hidden.
Lost password: WhatsApp code, then a new password.
Country code selector (245 countries, translated names), priority countries and an optional allow-list.
Login page with 4 layouts (brand panel, centered card, full-screen photo, minimal): colors, logos, font, texts and custom CSS, with a live preview in the admin.
Site-wide popup; menu links (#trc-login, #trc-register) and links to old login pages open it.
Redirects old login addresses (e.g. /my-account/?tab=login), optionally wp-login.php, and replaces the WooCommerce login forms.
Existing accounts: numbers saved by WooCommerce (billing_phone), « OTP Login With Phone Number » (phone_number) or any meta key you add are recognized, and an import normalizes them.
Security: hashed codes, limited attempts, resend delay, limits per number and per IP address, honeypot field, fresh nonce for cached pages.
Sending: Meta WhatsApp Cloud API (approved templates), UltraMsg, Green-API or a custom HTTP API.

TRC OTP Login is not affiliated with or endorsed by WhatsApp or Meta.

Country calling codes and number formats come from libphonenumber-js (MIT license).

External services

This plugin sends the one-time code through the WhatsApp provider you choose in the settings. Only the selected provider is contacted, and only when a code is requested (login, registration, lost password, admin test) or when you load your templates in the admin.

Meta WhatsApp Cloud API (graph.facebook.com): receives the recipient’s phone number and the message (template name, language and parameters, including the code). It is also called from the admin to list your approved templates. Terms: https://www.whatsapp.com/legal/business-terms — Privacy policy: https://www.whatsapp.com/legal/privacy-policy
UltraMsg (api.ultramsg.com): receives the recipient’s phone number and the message text. Terms: https://ultramsg.com/terms-conditions.php — Privacy policy: https://ultramsg.com/privacy-policy.php
Green-API (api.green-api.com or the host you set): receives the recipient’s phone number and the message text. Terms: https://green-api.com/en/user-agreement — Privacy policy: https://green-api.com/en/privacy-policy
Custom HTTP API: receives the data you configure (usually the phone number and the message) at the URL you enter. Its terms are those of the service you choose.
Google Fonts (fonts.googleapis.com, fonts.gstatic.com): when a Google font is selected in the Design tab, the login forms and page load it from Google, which receives the visitor’s IP address. Choose « Theme font » to avoid this request. Privacy policy: https://policies.google.com/privacy

Shortcodes

[trc_wa_login_form tab= »login|register|lostpw » redirect= »URL »]
[trc_wa_login_page]
[trc_wa_login_link tab= »login|register » text= »Log in »]
Menu links #trc-login, #trc-register; classes trc-login-tgr, trc-register-tgr.

Customization

Filters: trc_wa_login_redirect, trc_wa_new_user_data, trc_wa_new_username, trc_wa_new_user_role, trc_wa_registration_errors, trc_wa_find_user_by_phone, trc_wa_countries, trc_wa_otp_code, trc_wa_otp_meta_payload, trc_wa_otp_message_text, trc_wa_ip_hourly_limit, trc_wa_client_ip, trc_wa_isolate_keep.
Actions: trc_wa_logged_in, trc_wa_user_registered, trc_wa_otp_send_failed, trc_wa_otp_after_send.
JavaScript: TRCWAAuth.open(‘login’ | ‘register’), TRCWAAuth.close().
PHP: trc_wa_otp_send( $phone, $code ) sends a code outside the login forms.

Captures d’écrans

Registration form: name, WhatsApp number and optional email. — Login page, « brand panel » layout: the visitor enters their WhatsApp number.

Installation

Upload the plugin (Plugins Add New Upload Plugin) and activate it.
Settings TRC OTP Login WhatsApp API and Message: enter your provider credentials and template, then use the Test tab.
Pages & popup: click « Create the Login page », then add the old login addresses to replace.
Design: layout, colors, logos.
Migration: « Import numbers » if your members already have a phone number on their account.
Check that an existing account can log in, then deactivate your previous login plugin.

FAQ

Do I need a WhatsApp Business account?: Yes. With the Meta WhatsApp Cloud API you need a WhatsApp Business account, a phone number ID, a permanent access token and an approved message template (an « Authentication » template is recommended). UltraMsg and Green-API work with their own WhatsApp instances.
Can I keep a password login?: Yes. The login method can be « WhatsApp code only », « WhatsApp code with password option » or « password only » (registration is then still verified by WhatsApp).
Where are phone numbers stored?: In the user meta trc_wa_phone (international format, digits only). The verified number is also copied into empty phone fields (WooCommerce billing_phone and the fields you list). Numbers are kept when the plugin is uninstalled.
Can I customize the login page template?: Copy templates/login-page.php into your theme as trc-otp-login/login-page.php.

Avis

Il n’y a aucun avis pour cette extension.

Contributeurs/contributrices & développeurs/développeuses

« TRC OTP Login » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.

theringconcept

Traduisez « TRC OTP Login » dans votre langue.

Le développement vous intéresse ?

Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.

Journal des modifications

2.3.0

Plugin renamed « TRC OTP Login » (slug trc-otp-login). Settings, phone numbers and shortcodes are unchanged.

2.2.0

All names stored by the plugin now use the trc_wa_ prefix (user meta, shortcodes, AJAX actions, scripts). Existing user data and shortcodes in posts and Elementor are migrated automatically; update shortcodes placed in widgets by hand.
Rate limits and code attempts use atomic counters, so simultaneous requests cannot exceed them.
If you use the WhatsApp gateway of « OTP Login With Phone Number », select it again in that plugin’s settings (its identifier is now trc_wa_whatsapp).
New accounts can never receive a privileged role, even through filters.
The custom CSS field was removed: use Appearance Customize Additional CSS instead.
Scripts and styles are always enqueued; translations are delivered by translate.wordpress.org.

2.1.0

First public release on WordPress.org: English source strings with French translation.
Removed compatibility code for third-party login popup plugins (their shortcodes, buttons and phone fields). Phone fields from any plugin can still be added under Forms Existing accounts.
Default country: Benin. Scripts loaded with the defer strategy.
Settings page renamed « TRC OTP Login », with the plugin icon.

2.0.5

Adjustable per-IP code limit (Forms tab), with one-click temporary lift (1 h, 4 h, 24 h) or full disable from the settings or the « TRC OTP Login » dashboard widget. Useful when several people register in a row on the same device.
Only codes actually sent count toward the limits.

2.0.4

Benin: +229 XX XX XX XX and +229 01 XX XX XX XX are the same account; the number is always saved and contacted in the 10-digit format (01). Old 8-digit accounts are updated at login or during import.

2.0.3

Username of new accounts built from the name (firstname.lastname), optionally with the last 4 digits, or the phone number only.
The verified number is always saved in the phone fields (billing_phone, added fields): at registration, at each login and during import, without overwriting another number.

2.0.2

Role of new accounts: the site default role (Settings General) instead of « Customer »; button to apply it to accounts already created.
« Check a number » tool (Migration tab): recognized account and source field, without sending or changing anything.
Additional configurable phone fields.

2.0.1

The embedded form (shortcodes, WooCommerce) is shown as a centered card, even on a full-width page. Option style= »plain ».
« Yellow and slate » color preset.
Link color computed to stay readable on white, even with a light primary color.

2.0.0

Standalone plugin: WhatsApp login, registration and lost password forms.
Designed login page (4 layouts) with live preview, popup, old page redirects, WooCommerce and wp-login.php replacement.
Recognition and import of existing numbers (WooCommerce and LWP).

1.1.0

« Full payload » mode, payload generated from Meta templates, payload preview, Meta errors explained.

1.0.0

Initial release (WhatsApp gateway for « OTP Login With Phone Number »).