previous icon Back to blog
Aug 04, 2023
5 minutes read

How to use WhatsApp Business One Time Passwords

Chances are that you've received One Time Passwords (OTPs) before, often via SMS or email. But did you know there might be an even better platform to send OTPs on? WhatsApp Business Platform allows you to send One Time Passwords on your customers' favourite messaging channel, enhancing the customer experience and improving customer relations.

WhatsApp is currently one of the most popular social apps. It's considered a titan among messaging channels, with two billion people across the world using WhatsApp on a monthly basis, sending about 100 billion messages each day! WhatsApp Business Platform is already known to be a great tool for customer communication, with its global reach and enticing features, but did you know it's also possible to send One Time Passwords?

One Time Passwords (OTP) via WhatsApp

Traditionally, we're used to receiving One Time Passwords for two-factor authentication via SMS or email, but these text messages aren't encrypted. Hackers aim to intercept OTPs, and these unencrypted messages tied to your phone number can be the victim of phishing or social engineering fraud.

Hence, businesses are looking for new ways to send these OTPs to their customers with as low a risk as possible. And that's where the WhatsApp Business Platform comes in.

One Time Passwords via WhatsApp are end-to-end encrypted and secure, making it one of the safest options out there, and the innovative features and global reach make for a great customer experience. The seamless use of OTP message templates allows you to initiate contact with your customers, verifying their identity at multiple touchpoints during their customer journey, such as login, account registration, or account recovery.

It's good to know that WhatsApp Business identifies four conversation categories: service (user-initiated), utility (business-initiated), marketing (business-initiated), and authentication (business-initiated). OTP message templates belong to the authentication conversation category (and will also be priced as such).

Benefits of WhatsApp Business OTP

Some key benefits of One Time Passwords via the WhatsApp Business Platform:

  1. Reach: WhatsApp is immensely popular, and utilising the favorite messaging channel of your customers will increase the experience with your business. Your customers are already familiar with WhatsApp. Now they can use the app they already use for communication for OTPs.

  2. Communication: Customers can easily communicate and ask questions over WhatsApp if they encounter any issues in the authentication process.

  3. Security: WhatsApp OTPs are end-to-end encrypted, making them more difficult to intercept or misuse than traditional channels.

How to Start Sending OTP via WhatsApp

First, you need access to the WhatsApp Business Platform. You can sign up for a WhatsApp Business account via a Business Service Provider (BSP) like CM.com. Are you already using WhatsApp for your business? Then setting up the OTPs will be easy.

To send OTPs, you need to use an authentication template with a One Time Password button (OTP) to deliver the password or code. You can use a pre-existing authentication message template or create your own and submit it for approval. OTP templates have some requirements they need to meet, as explained below.

Authentication Templates with OTP Buttons

Authentication message templates with OTP buttons generally look as follows:

  • Preset authentication message template fixed text:

    • <VERIFICATION_CODE> is your verification code.

    • Security disclaimer (optional): Do not share this code for your security.

    • Expiration warning (optional): This code expires in <NUM_MINUTES> minutes.

  • Button: Either a copy code or a one-tap autofill button.

1234 is your verification code. Please do not share this code for your safety. This code will expire in 10 minutes.
[Copy Code]

URLs, media, and emojis are not supported in OTP Authentication conversation messages. Because the messages consist of only text and buttons, the risk that they will be paused or delayed is minimized.

Buttons

As stated above, Authentication templates have to include either a copy code or a one-tap autofill button. The difference between these two buttons is how they behave after being tapped by your customer:

  • A copy code button copies the One Time Password or code to the customer's clipboard. They can then manually switch to your app and paste the password or code into your website or app.

  • A one-tap autofill button automatically loads and copy+pastes the One Time Password in your website or app.

The one-tap buttons offer the best user experience, but they are currently only supported on Android, and they might require some additional IT development to make them work.

WhatsApp OTP Best Practices

Once you've created your first OTP message template, here are some best practices to keep in mind:

  • Confirm the WhatsApp phone number of your customer before sending the One Time Password to that number.

  • Make sure to manage the customer's expectations. Let them know the code will be delivered to their WhatsApp phone number, especially if your business offers multiple ways to receive OTPs.

  • Once the customer has successfully entered the code or OTP to your website or app, let them know that your business received it and whether or not the code was correct.

Start Sending Your OTP via WhatsApp

Increased security with a global reach and customer relationship enhancement over the favorite messaging channel of your customers? Who would say no to that? Are you also excited to get started with WhatsApp One Time Passwords? Talk to one of our experts to request a demo and find out everything you need to know about pricing, implementation, or anything else you might need.

Start with WhatsApp OTP Today!

Was this article interesting?
Share it!
Christel Brouwers
Copywriter at CM.com. Passionate about language and getting CM.com’s message out there. Shares content about CPaaS, Payments and more.

Latest Articles

engage-platform-effect-customer-service
May 09, 2024 • CM.com

Happy clients, happy agents: the platform effect in customer service

As a member of the customer service team, you stand on the frontline of customer interaction every day. In a world where customers demand quick and personalized service, long wait times, impersonal responses, or worse, incorrect answers, can quickly drive a customer away. Your goal, however, is to connect customers with your organization and deliver the best answers and service possible.

WhatsApp vs Facebook Messenger
Jan 18, 2024 • Instant Messaging

WhatsApp vs Facebook Messenger: Which Messaging Channel is Best for What?

WhatsApp and Facebook Messenger are both established messaging channels for customer engagement. But what are the differences? Which advantages does each channel have for what business use case? Let's dive into the details

Ads That Click to WhatsApp
Jan 18, 2024 • Marketing

Ads That Click to WhatsApp: What Are They and What Are the Benefits?

Successful marketing means creating personal and conversational experiences for your customers. And what better place to meaningfully connect to your customers than on their favorite social media platforms and channels such as Facebook, Instagram and WhatsApp? With ads that click to WhatsApp, aka click-to-chat WhatsApp ads, you can offer your customers the direct and personal engagement that they crave. Read all about it!

mfa-sso-blog-hero
Sep 18, 2023 • Authentication

MFA/2FA vs. SSO: Navigating the Digital Security Landscape

In today's interconnected world, the importance of robust digital security cannot be overstated. As businesses and individuals grapple with increasing cyber threats, the choice of security measures becomes crucial.

messaging-fraud-and-prevention-for-businesses
Sep 12, 2023 • Instant Messaging

A2P Messaging Fraud and Prevention for Businesses

Safeguarding company data against security threats should be at the top of the priorities list for every modern company. Especially since A2P, or application-to-person messaging fraud, is on the rise. Read about the different types of A2P fraud and the steps you can take to avoid becoming the next victim.

blog-image-2fa-best-practices
Aug 23, 2023 • Authentication

Best practices for Multi-Factor Authentication (MFA)

Implementing safe and secure systems is crucial for most modern companies. Or at least it should be. But, security measures only work if both employees and customers are willing to adopt them. So, how do you get everybody on board?

whatsapp-authentication
Aug 14, 2023 • Authentication

Two Factor Authentication (2FA) on different messaging channels

Two Factor Authentication, or 2FA, is an effective way to protect your data and customers. But how do you set up Two Factor Authentication? And what messaging channels can be used for 2FA?

two-factor-authentication
Aug 07, 2023 • Authentication

The Benefits of 2FA for Business

Protecting customer data is (or should be) a priority for every modern business. One of the most secure ways to verify customer information is by multi-factor authentication (MFA). In this blog, we’ll discuss the top benefits of MFA (and 2FA) and explain why it’s a must-have for mobile-native businesses.