kwtsms

<p><strong>kwtSMS</strong> replaces or supplements WordPress passwords with SMS one-time codes, sends WooCommerce order updates automatically, and lets you verify phone numbers on any contact form. Built on the <a href="https://www.kwtsms.com" rel="nofollow ugc">kwtSMS</a> SMS gateway.</p>
<p>Built for Arabic-speaking markets (Kuwait, Saudi Arabia, UAE, Bahrain, Qatar, Oman) with full RTL admin support and bilingual SMS templates in English and Arabic.</p>
<h4>Authentication</h4>
<ul>
<li><strong>2FA Mode:</strong> users log in with username + password, then confirm with a 6-digit SMS code</li>
<li><strong>Passwordless Mode:</strong> users enter their phone number and receive an OTP to log in directly, no password needed</li>
<li><strong>Both Modes:</strong> let each user choose their preferred method</li>
<li><strong>Password Reset via SMS:</strong> replace the email link with an SMS OTP verification flow</li>
<li><strong>Role-Based Enforcement:</strong> configure which user roles must pass OTP (exclude administrators, apply only to customers, etc.)</li>
<li><strong>Welcome SMS:</strong> send a customisable welcome message when a new user registers</li>
<li><strong>Country Code Dropdown:</strong> restrict the dial-code selector on login forms to GCC countries or a custom list</li>
</ul>
<h4>WooCommerce Integration</h4>
<ul>
<li><strong>7 order status notifications:</strong> Processing, On-Hold (Shipped), Completed, Cancelled, Pending Payment, Refunded, Failed</li>
<li><strong>Admin order notifications:</strong> automatically notify a configurable admin phone number on any order status change</li>
<li><strong>Checkout OTP Gate:</strong> require phone verification before the customer can place an order (all methods or COD-only)</li>
<li><strong>Per-status templates:</strong> independent English + Arabic SMS template for every order status</li>
<li><strong>Admin SMS panel:</strong> send a custom free-text SMS to any order’s customer from the order edit screen</li>
<li><strong>Stock alerts:</strong> low stock, out of stock, and backorder notifications to admin</li>
<li><strong>New product SMS:</strong> notify admin when a product is first published</li>
<li><strong>Back-in-stock notifications:</strong> customers subscribe on out-of-stock product pages, SMS sent automatically on restock</li>
<li><strong>Instant new order SMS:</strong> notify admin the moment an order is placed, before status processing</li>
<li><strong>Cart abandonment recovery:</strong> detect abandoned carts, send recovery SMS with auto-generated coupon codes, track recovery stats on the dashboard</li>
<li><strong>Multivendor support:</strong> per-vendor order SMS for Dokan, WCFM, and WC Vendors</li>
<li>HPOS (High-Performance Order Storage) compatible</li>
</ul>
<h4>Contact Form Integrations</h4>
<p>Each integration supports two modes: <strong>Notification</strong> (send a confirmation SMS on submit) and <strong>OTP Gate</strong> (block submission until the phone number is verified):</p>
<ul>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Ninja Forms</li>
</ul>
<h4>Security</h4>
<ul>
<li>Sliding-window rate limiting per phone number, per IP address, and per user account</li>
<li>Duplicate OTP guard: reuses existing valid OTP on double-click or page reload</li>
<li>IP Allowlist/Blocklist with CIDR support for IPv4 and IPv6</li>
<li>IPHub proxy/VPN detection (optional): silently block or flag OTP requests from known proxies</li>
<li>Registration OTP gate: verify phone via OTP before account creation</li>
<li>Trusted Devices: trust a device for 30 days after 2FA, with profile revoke controls</li>
<li>Phone blocking list: silently drop OTP requests from blocked numbers (anti-enumeration)</li>
<li>Attempt lockout after configurable max failures</li>
<li>Google reCAPTCHA v3 and Cloudflare Turnstile support</li>
<li>All credentials stored server-side, never output to HTML</li>
<li>Nonces on every form and AJAX action</li>
<li>Anti-enumeration: password reset never reveals whether an account exists</li>
</ul>
<h4>External Services</h4>
<p>This plugin connects to the following external services:</p>
<p><strong>1. kwtSMS API</strong> (required): sends all SMS messages. <a href="https://www.kwtsms.com" rel="nofollow ugc">kwtsms.com</a> | <a href="https://www.kwtsms.com/policy.html" rel="nofollow ugc">Terms</a> | <a href="https://www.kwtsms.com/privacy.html" rel="nofollow ugc">Privacy</a></p>
<p><strong>2. ipapi.co</strong> (optional): detects visitor country for dial-code pre-selection. <a href="https://ipapi.co" rel="nofollow ugc">ipapi.co</a> | <a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms</a> | <a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy</a></p>
<p><strong>3. IPHub</strong> (optional): proxy/VPN detection on OTP requests. <a href="https://iphub.info" rel="nofollow ugc">iphub.info</a> | <a href="https://iphub.info/legal" rel="nofollow ugc">Terms</a> | <a href="https://iphub.info/legal" rel="nofollow ugc">Privacy</a></p>
<p><strong>4. Google reCAPTCHA v3</strong> (optional): bot protection on OTP forms. <a href="https://www.google.com/recaptcha/" rel="nofollow ugc">google.com/recaptcha</a> | <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy</a></p>
<p><strong>5. Cloudflare Turnstile</strong> (optional): alternative bot protection. <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">cloudflare.com/turnstile</a> | <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Terms</a> | <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Privacy</a></p>
<h4>Admin</h4>
<ul>
<li><strong>Users Without Phone</strong> sub-page under the WordPress Users menu: lists all registered users missing a phone number, with a dynamic count badge on the menu item</li>
</ul>
<h4>Test Mode</h4>
<p>Enable <strong>Test Mode</strong> in the Gateway settings to test without receiving real SMS messages. Messages are queued on the kwtSMS server but never delivered to the phone. Credits are still deducted. To recover them, log in to your kwtSMS account dashboard and delete the queued messages. The OTP code is visible under kwtSMS > Logs > Debug Log so you can complete flows during development.</p>
<h4>Languages</h4>
<p>Ships with English (default) and Arabic translations. The plugin admin UI and all user-facing strings are fully translatable.</p>
<h3>Help & Support</h3>
<ul>
<li><strong><a href="https://www.kwtsms.com/faq/" rel="nofollow ugc">kwtSMS FAQ</a></strong>: Answers to common questions about credits, sender IDs, OTP, and delivery.</li>
<li><strong><a href="https://www.kwtsms.com/support.html" rel="nofollow ugc">kwtSMS Support</a></strong>: Open a support ticket or browse help articles.</li>
<li><strong><a href="https://www.kwtsms.com/#contact" rel="nofollow ugc">Contact kwtSMS</a></strong>: Reach the kwtSMS team directly for Sender ID registration and account issues.</li>
<li><strong><a href="https://www.kwtsms.com/sender-id-help.html" rel="nofollow ugc">Sender ID Help</a></strong>: Sender ID registration and guidelines.</li>
<li><strong><a href="https://www.kwtsms.com/login/" rel="nofollow ugc">kwtSMS Dashboard</a></strong>: Recharge credits, buy Sender IDs, view message logs, and manage coverage.</li>
<li><strong><a href="https://www.kwtsms.com/integrations.html" rel="nofollow ugc">Other Integrations</a></strong>: Plugins and integrations for other platforms and languages.</li>
<li><strong><a href="https://github.com/boxlinknet/kwtsms-wordpress/issues" rel="nofollow ugc">Plugin Issues</a></strong>: Report bugs or request features for this WordPress plugin.</li>
</ul>


kwtSMS: OTP & SMS Notifications

SMS OTP login, password reset, and WooCommerce order notifications via the kwtSMS gateway. Arabic RTL support included.

Konceptwise Digital Media Pvt Ltd

<p>Authyo OTP for MetForm lets you add One-Time Password (OTP) verification to any MetForm form in seconds. Protect your forms from spam and fake submissions by verifying real email addresses and phone numbers before the form is submitted.</p>
<h4>Why Use OTP Verification?</h4>
<ul>
<li><strong>Reduce spam and fake leads</strong> — only verified users can submit forms.</li>
<li><strong>Improve data quality</strong> — ensure the email and phone number entered are real and accessible.</li>
<li><strong>Build trust</strong> — visitors know their information is being handled securely.</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install the plugin and enter your Authyo API credentials.</li>
<li>Drag the <strong>Authyo Email</strong> or <strong>Authyo Phone</strong> widget into your MetForm form using Elementor.</li>
<li>That’s it — OTP verification activates automatically on any form that contains an Authyo widget.</li>
</ol>
<p>No extra toggles, no per-form configuration. Just add the widget and it works.</p>
<h4>Supported Verification Channels</h4>
<ul>
<li><strong>Email</strong> — OTP delivered to the visitor’s email inbox.</li>
<li><strong>SMS</strong> — OTP delivered via text message to the visitor’s phone.</li>
<li><strong>WhatsApp</strong> — OTP delivered via WhatsApp message.</li>
<li><strong>Voice Call</strong> — OTP delivered via automated voice call (currently available in India).</li>
</ul>
<h4>Key Features</h4>
<ul>
<li><strong>Multi-Channel Verification:</strong> Deliver OTPs via SMS, WhatsApp, Voice Call, or Email.</li>
<li><strong>Zero-Config Integration:</strong> Automatically activates on any MetForm that contains an Authyo widget — no per-form enable toggle needed.</li>
<li><strong>Visitor Choice:</strong> Optionally allow visitors to choose their preferred verification method.</li>
<li><strong>Fallback Methods:</strong> If the primary method doesn’t work, visitors can try an alternative channel (e.g., switch from SMS to WhatsApp).</li>
<li><strong>Skip Verification:</strong> Optionally allow visitors to skip OTP for specific channels.</li>
<li><strong>Country Dropdown:</strong> Configurable country selector with All Countries, Selected Only, or Single Country modes.</li>
<li><strong>Failsafe Behavior:</strong> If the Authyo API cannot deliver OTP messages due to insufficient balance, the plugin automatically allows form submission to prevent lead loss.</li>
<li><strong>Customizable Security:</strong> Configure OTP length (4-8 digits), expiry time (1-10 minutes), resend cooldowns, and max resend attempts.</li>
<li><strong>Lead Management:</strong> View all form submissions with verification status (Verified, Skipped, Unverified) directly in WordPress admin.</li>
</ul>
<p><strong>Important Note:</strong> OTP verification requires valid Authyo API credentials and sufficient wallet balance. When unavailable, form submissions will proceed without OTP verification to prevent lead loss.</p>
<p><strong>Disclaimer:</strong> This plugin is an independent third-party integration for MetForm. It is not affiliated with, endorsed by, or officially supported by MetForm.</p>
<h3>Video Tutorial</h3>
<p><strong>Video Tutorial How to Use Authyo OTP for MetForm</strong></p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/KG0DoqDGL2k?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>Watch the video above for a step-by-step walkthrough of setting up Authyo OTP with MetForm.</p>
<h3>Company Information</h3>
<p>This plugin is developed and maintained by Konceptwise Digital Media Pvt. Ltd.</p>
<p>Authyo is a service owned and operated by Konceptwise Digital Media Pvt. Ltd. and is used by this plugin solely for one-time password (OTP) generation and verification. Details about data usage and applicable privacy and terms policies are provided in the section below.</p>
<h3>External Services</h3>
<p>This plugin connects to the following external services:</p>
<h4>Authyo OTP API</h4>
<p>Used to send and verify One-Time Passwords (OTP).</p>
<ul>
<li><strong>Service URL:</strong> <a href="https://authyo.io" rel="nofollow ugc">https://authyo.io</a></li>
<li><strong>API Endpoints:</strong>
<ul>
<li><code>https://app.authyo.io/api/v1/auth/sendotp</code> — sends OTP to the visitor’s email or phone.</li>
<li><code>https://app.authyo.io/api/v1/auth/verifyotp</code> — verifies the OTP entered by the visitor.</li>
<li><code>https://app.authyo.io/api/v1/user/getcountrylist</code> — fetches the list of supported countries for the phone dropdown.</li>
</ul>
</li>
<li><strong>Data Sent:</strong> Phone numbers and email addresses entered into the OTP verification forms are sent to Authyo servers to dispatch verification codes.</li>
<li><strong>When:</strong> During form submission when OTP verification is active.</li>
</ul>
<h4>Authyo Webhook</h4>
<p>Used for Customer Support and optional email subscription.</p>
<ul>
<li><strong>Endpoint:</strong> <code>https://app.authyo.io/api/v1/user/WordpressWebhook</code></li>
<li><strong>Data Sent:</strong>
<ul>
<li>On plugin activation/settings save: plugin version, site URL, App ID (non-blocking, fire-and-forget).</li>
<li>On plugin deactivation: optional feedback reason and plugin version.</li>
<li>On email subscription (opt-in only): admin email address, site URL, plugin version.</li>
</ul>
</li>
<li><strong>When:</strong> On plugin activation, settings save, deactivation feedback, and optional email subscription.</li>
<li>
<p><strong>Note:</strong> All webhook requests are non-blocking and will not delay page loads or admin operations.</p>
</li>
<li>
<p><strong>Privacy Policy:</strong> <a href="https://authyo.io/privacy-policy" rel="nofollow ugc">Authyo Privacy Policy</a></p>
</li>
<li><strong>Terms of Service:</strong> <a href="https://authyo.io/terms-service/" rel="nofollow ugc">Authyo Terms of Service</a></li>
</ul>


Authyo OTP for Met Form

Add OTP verification to MetForm — verify emails and phone numbers via SMS, WhatsApp, Voice Call, and Email using Authyo.

kwtSMS: OTP & SMS Notifications vs Authyo OTP for Met Form