kwtsms

<p><strong>kwtSMS</strong> replaces or supplements WordPress passwords with SMS one-time codes, sends WooCommerce order updates automatically, and lets you verify phone numbers on any contact form. Built on the <a href="https://www.kwtsms.com" rel="nofollow ugc">kwtSMS</a> SMS gateway.</p>
<p>Built for Arabic-speaking markets (Kuwait, Saudi Arabia, UAE, Bahrain, Qatar, Oman) with full RTL admin support and bilingual SMS templates in English and Arabic.</p>
<h4>Authentication</h4>
<ul>
<li><strong>2FA Mode:</strong> users log in with username + password, then confirm with a 6-digit SMS code</li>
<li><strong>Passwordless Mode:</strong> users enter their phone number and receive an OTP to log in directly, no password needed</li>
<li><strong>Both Modes:</strong> let each user choose their preferred method</li>
<li><strong>Password Reset via SMS:</strong> replace the email link with an SMS OTP verification flow</li>
<li><strong>Role-Based Enforcement:</strong> configure which user roles must pass OTP (exclude administrators, apply only to customers, etc.)</li>
<li><strong>Welcome SMS:</strong> send a customisable welcome message when a new user registers</li>
<li><strong>Country Code Dropdown:</strong> restrict the dial-code selector on login forms to GCC countries or a custom list</li>
</ul>
<h4>WooCommerce Integration</h4>
<ul>
<li><strong>7 order status notifications:</strong> Processing, On-Hold (Shipped), Completed, Cancelled, Pending Payment, Refunded, Failed</li>
<li><strong>Admin order notifications:</strong> automatically notify a configurable admin phone number on any order status change</li>
<li><strong>Checkout OTP Gate:</strong> require phone verification before the customer can place an order (all methods or COD-only)</li>
<li><strong>Per-status templates:</strong> independent English + Arabic SMS template for every order status</li>
<li><strong>Admin SMS panel:</strong> send a custom free-text SMS to any order’s customer from the order edit screen</li>
<li><strong>Stock alerts:</strong> low stock, out of stock, and backorder notifications to admin</li>
<li><strong>New product SMS:</strong> notify admin when a product is first published</li>
<li><strong>Back-in-stock notifications:</strong> customers subscribe on out-of-stock product pages, SMS sent automatically on restock</li>
<li><strong>Instant new order SMS:</strong> notify admin the moment an order is placed, before status processing</li>
<li><strong>Cart abandonment recovery:</strong> detect abandoned carts, send recovery SMS with auto-generated coupon codes, track recovery stats on the dashboard</li>
<li><strong>Multivendor support:</strong> per-vendor order SMS for Dokan, WCFM, and WC Vendors</li>
<li>HPOS (High-Performance Order Storage) compatible</li>
</ul>
<h4>Contact Form Integrations</h4>
<p>Each integration supports two modes: <strong>Notification</strong> (send a confirmation SMS on submit) and <strong>OTP Gate</strong> (block submission until the phone number is verified):</p>
<ul>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Ninja Forms</li>
</ul>
<h4>Security</h4>
<ul>
<li>Sliding-window rate limiting per phone number, per IP address, and per user account</li>
<li>Duplicate OTP guard: reuses existing valid OTP on double-click or page reload</li>
<li>IP Allowlist/Blocklist with CIDR support for IPv4 and IPv6</li>
<li>IPHub proxy/VPN detection (optional): silently block or flag OTP requests from known proxies</li>
<li>Registration OTP gate: verify phone via OTP before account creation</li>
<li>Trusted Devices: trust a device for 30 days after 2FA, with profile revoke controls</li>
<li>Phone blocking list: silently drop OTP requests from blocked numbers (anti-enumeration)</li>
<li>Attempt lockout after configurable max failures</li>
<li>Google reCAPTCHA v3 and Cloudflare Turnstile support</li>
<li>All credentials stored server-side, never output to HTML</li>
<li>Nonces on every form and AJAX action</li>
<li>Anti-enumeration: password reset never reveals whether an account exists</li>
</ul>
<h4>External Services</h4>
<p>This plugin connects to the following external services:</p>
<p><strong>1. kwtSMS API</strong> (required): sends all SMS messages. <a href="https://www.kwtsms.com" rel="nofollow ugc">kwtsms.com</a> | <a href="https://www.kwtsms.com/policy.html" rel="nofollow ugc">Terms</a> | <a href="https://www.kwtsms.com/privacy.html" rel="nofollow ugc">Privacy</a></p>
<p><strong>2. ipapi.co</strong> (optional): detects visitor country for dial-code pre-selection. <a href="https://ipapi.co" rel="nofollow ugc">ipapi.co</a> | <a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms</a> | <a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy</a></p>
<p><strong>3. IPHub</strong> (optional): proxy/VPN detection on OTP requests. <a href="https://iphub.info" rel="nofollow ugc">iphub.info</a> | <a href="https://iphub.info/legal" rel="nofollow ugc">Terms</a> | <a href="https://iphub.info/legal" rel="nofollow ugc">Privacy</a></p>
<p><strong>4. Google reCAPTCHA v3</strong> (optional): bot protection on OTP forms. <a href="https://www.google.com/recaptcha/" rel="nofollow ugc">google.com/recaptcha</a> | <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy</a></p>
<p><strong>5. Cloudflare Turnstile</strong> (optional): alternative bot protection. <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">cloudflare.com/turnstile</a> | <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Terms</a> | <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Privacy</a></p>
<h4>Admin</h4>
<ul>
<li><strong>Users Without Phone</strong> sub-page under the WordPress Users menu: lists all registered users missing a phone number, with a dynamic count badge on the menu item</li>
</ul>
<h4>Test Mode</h4>
<p>Enable <strong>Test Mode</strong> in the Gateway settings to test without receiving real SMS messages. Messages are queued on the kwtSMS server but never delivered to the phone. Credits are still deducted. To recover them, log in to your kwtSMS account dashboard and delete the queued messages. The OTP code is visible under kwtSMS > Logs > Debug Log so you can complete flows during development.</p>
<h4>Languages</h4>
<p>Ships with English (default) and Arabic translations. The plugin admin UI and all user-facing strings are fully translatable.</p>
<h3>Help & Support</h3>
<ul>
<li><strong><a href="https://www.kwtsms.com/faq/" rel="nofollow ugc">kwtSMS FAQ</a></strong>: Answers to common questions about credits, sender IDs, OTP, and delivery.</li>
<li><strong><a href="https://www.kwtsms.com/support.html" rel="nofollow ugc">kwtSMS Support</a></strong>: Open a support ticket or browse help articles.</li>
<li><strong><a href="https://www.kwtsms.com/#contact" rel="nofollow ugc">Contact kwtSMS</a></strong>: Reach the kwtSMS team directly for Sender ID registration and account issues.</li>
<li><strong><a href="https://www.kwtsms.com/sender-id-help.html" rel="nofollow ugc">Sender ID Help</a></strong>: Sender ID registration and guidelines.</li>
<li><strong><a href="https://www.kwtsms.com/login/" rel="nofollow ugc">kwtSMS Dashboard</a></strong>: Recharge credits, buy Sender IDs, view message logs, and manage coverage.</li>
<li><strong><a href="https://www.kwtsms.com/integrations.html" rel="nofollow ugc">Other Integrations</a></strong>: Plugins and integrations for other platforms and languages.</li>
<li><strong><a href="https://github.com/boxlinknet/kwtsms-wordpress/issues" rel="nofollow ugc">Plugin Issues</a></strong>: Report bugs or request features for this WordPress plugin.</li>
</ul>


kwtSMS: OTP & SMS Notifications

SMS OTP login, password reset, and WooCommerce order notifications via the kwtSMS gateway. Arabic RTL support included.

Konceptwise Digital Media Pvt Ltd

<p><strong>Authyo Authentication and Notification for WooCommerce</strong> lets your customers log in, register, and check out using a one-time password (OTP) — no password required. It also keeps customers informed at every step of their order with real-time notifications via Email, SMS, and WhatsApp.</p>
<p>Built for WooCommerce stores that want to reduce friction, lower cart abandonment, and improve customer communication — all through a single plugin.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/jaQMFA7TvzI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>Why Use OTP Authentication?</h4>
<p>Passwords cause real problems for online stores: forgotten credentials, account lockouts, and weak passwords that put customers at risk. OTP authentication solves all of this by sending a short verification code directly to your customer’s email or phone — no password to remember, no account to recover.</p>
<p>The result: <strong>a faster, safer checkout experience</strong> that customers actually prefer.</p>
<h4>OTP Login & Registration</h4>
<p>Add passwordless login and registration to any page using simple shortcodes:</p>
<ul>
<li><strong><code>[authyo_login]</code></strong> — Adds an OTP-based login form to any page</li>
<li><strong><code>[authyo_register]</code></strong> — Adds an OTP-based registration form to any page</li>
</ul>
<p>Customers enter their email address or mobile number, receive an OTP, and are logged in or registered instantly. No passwords involved.</p>
<p><strong>Supported OTP delivery channels:</strong></p>
<ul>
<li>📧 <strong>Email</strong> — Delivered to the customer’s inbox</li>
<li>💬 <strong>WhatsApp</strong> — Sent as a WhatsApp message</li>
<li>📱 <strong>SMS</strong> — Sent as a text message</li>
<li>📞 <strong>Voice Call</strong> — OTP read aloud via automated call</li>
</ul>
<p>You choose which channels to enable, set a priority channel, and configure automatic fallback so customers always receive their OTP even if one channel fails.</p>
<h4>OTP Verification at Checkout</h4>
<p>Optionally require customers to verify their email address or phone number before completing a purchase. This adds a layer of confirmation that the contact details provided are accurate — reducing failed deliveries, disputes, and fraudulent orders.</p>
<p>The checkout OTP field is session-based (not form-based) for security, and works with both classic WooCommerce checkout and the newer Checkout Block.</p>
<h4>WooCommerce Order Notifications</h4>
<p>Keep customers informed automatically when their order status changes. Configure notification flows for any order event:</p>
<ul>
<li>🔄 Order Received (Pending)</li>
<li>✅ Payment Confirmed (Processing)</li>
<li>📦 Order Completed</li>
<li>⏸ Order On Hold</li>
<li>❌ Order Cancelled</li>
<li>💸 Order Refunded</li>
<li>⚠️ Payment Failed</li>
</ul>
<p>For each event, choose to notify via <strong>Email</strong>, <strong>SMS</strong>, or <strong>WhatsApp</strong> (or any combination). Notifications use pre-built templates from your Authyo dashboard. Enable or disable individual flows at any time without deleting them.</p>
<h4>Security & Rate Limiting</h4>
<ul>
<li>Nonce verification on all form submissions and AJAX requests</li>
<li>Rate limiting: maximum 5 OTP requests per 10 minutes per user</li>
<li>Configurable maximum OTP attempt limit (1–20 attempts)</li>
<li>Configurable lockout period after too many failed attempts (1–1440 minutes)</li>
<li>All inputs are sanitized and validated</li>
<li>OTP bypass mode for testing with whitelisted emails and phone numbers</li>
</ul>
<h4>Configuration Options</h4>
<ul>
<li><strong>OTP length</strong> — 4 to 8 digits</li>
<li><strong>OTP expiry</strong> — 10 to 600 seconds</li>
<li><strong>Priority channel</strong> — Choose which delivery method is tried first for mobile numbers</li>
<li><strong>Fallback channels</strong> — Automatically retry with another channel if the primary one fails</li>
<li><strong>Country code management</strong> — Restrict the phone country dropdown to specific countries or allow all</li>
<li><strong>Default country</strong> — Pre-select a country code in the phone number field</li>
<li><strong>OTP activity log</strong> — View and manage all OTP send/verify events from the admin panel</li>
</ul>
<h4>Requirements</h4>
<p>This plugin connects to the <strong><a href="https://authyo.io" rel="nofollow ugc">Authyo.io</a></strong> API to send OTPs and notifications. A free Authyo account is required — sign up at <a href="https://authyo.io" rel="nofollow ugc">authyo.io</a>, generate your API credentials, and paste them into the plugin settings.</p>
<ul>
<li>WordPress 5.0 or higher</li>
<li>WooCommerce 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>A free Authyo.io account</li>
</ul>
<h4>WooCommerce Compatibility</h4>
<ul>
<li>✅ Compatible with WooCommerce High-Performance Order Storage (HPOS)</li>
<li>✅ Compatible with WooCommerce Cart and Checkout Blocks</li>
<li>✅ Tested with WooCommerce up to 9.0</li>
</ul>


Authyo Authentication and Notification for WooCommerce

Replace passwords with OTP login for WooCommerce. Verify customers at checkout and send order notifications via Email, SMS, WhatsApp, and Voice Call.

kwtSMS: OTP & SMS Notifications vs Authyo Authentication and Notification for WooCommerce