kwtsms

kwtSMS replaces or supplements WordPress passwords with SMS one-time codes, sends WooCommerce order updates automatically, and lets you verify phone numbers on any contact form. Built on the <a href="https://www.kwtsms.com" rel="nofollow ugc">kwtSMS</a> SMS gateway.
Built for Arabic-speaking markets (Kuwait, Saudi Arabia, UAE, Bahrain, Qatar, Oman) with full RTL admin support and bilingual SMS templates in English and Arabic.
<h4>Authentication</h4>
<ul>
<li>2FA Mode: users log in with username + password, then confirm with a 6-digit SMS code</li>
<li>Passwordless Mode: users enter their phone number and receive an OTP to log in directly, no password needed</li>
<li>Both Modes: let each user choose their preferred method</li>
<li>Password Reset via SMS: replace the email link with an SMS OTP verification flow</li>
<li>Role-Based Enforcement: configure which user roles must pass OTP (exclude administrators, apply only to customers, etc.)</li>
<li>Welcome SMS: send a customisable welcome message when a new user registers</li>
<li>Country Code Dropdown: restrict the dial-code selector on login forms to GCC countries or a custom list</li>
</ul>
<h4>WooCommerce Integration</h4>
<ul>
<li>7 order status notifications: Processing, On-Hold (Shipped), Completed, Cancelled, Pending Payment, Refunded, Failed</li>
<li>Admin order notifications: automatically notify a configurable admin phone number on any order status change</li>
<li>Checkout OTP Gate: require phone verification before the customer can place an order (all methods or COD-only)</li>
<li>Per-status templates: independent English + Arabic SMS template for every order status</li>
<li>Admin SMS panel: send a custom free-text SMS to any order’s customer from the order edit screen</li>
<li>Stock alerts: low stock, out of stock, and backorder notifications to admin</li>
<li>New product SMS: notify admin when a product is first published</li>
<li>Back-in-stock notifications: customers subscribe on out-of-stock product pages, SMS sent automatically on restock</li>
<li>Instant new order SMS: notify admin the moment an order is placed, before status processing</li>
<li>Cart abandonment recovery: detect abandoned carts, send recovery SMS with auto-generated coupon codes, track recovery stats on the dashboard</li>
<li>Multivendor support: per-vendor order SMS for Dokan, WCFM, and WC Vendors</li>
<li>HPOS (High-Performance Order Storage) compatible</li>
</ul>
<h4>Contact Form Integrations</h4>
Each integration supports two modes: Notification (send a confirmation SMS on submit) and OTP Gate (block submission until the phone number is verified):
<ul>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Ninja Forms</li>
</ul>
<h4>Security</h4>
<ul>
<li>Sliding-window rate limiting per phone number, per IP address, and per user account</li>
<li>Duplicate OTP guard: reuses existing valid OTP on double-click or page reload</li>
<li>IP Allowlist/Blocklist with CIDR support for IPv4 and IPv6</li>
<li>IPHub proxy/VPN detection (optional): silently block or flag OTP requests from known proxies</li>
<li>Registration OTP gate: verify phone via OTP before account creation</li>
<li>Trusted Devices: trust a device for 30 days after 2FA, with profile revoke controls</li>
<li>Phone blocking list: silently drop OTP requests from blocked numbers (anti-enumeration)</li>
<li>Attempt lockout after configurable max failures</li>
<li>Google reCAPTCHA v3 and Cloudflare Turnstile support</li>
<li>All credentials stored server-side, never output to HTML</li>
<li>Nonces on every form and AJAX action</li>
<li>Anti-enumeration: password reset never reveals whether an account exists</li>
</ul>
<h4>External Services</h4>
This plugin connects to the following external services:
1. kwtSMS API (required): sends all SMS messages. <a href="https://www.kwtsms.com" rel="nofollow ugc">kwtsms.com</a> | <a href="https://www.kwtsms.com/policy.html" rel="nofollow ugc">Terms</a> | <a href="https://www.kwtsms.com/privacy.html" rel="nofollow ugc">Privacy</a>
2. ipapi.co (optional): detects visitor country for dial-code pre-selection. <a href="https://ipapi.co" rel="nofollow ugc">ipapi.co</a> | <a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms</a> | <a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy</a>
3. IPHub (optional): proxy/VPN detection on OTP requests. <a href="https://iphub.info" rel="nofollow ugc">iphub.info</a> | <a href="https://iphub.info/legal" rel="nofollow ugc">Terms</a> | <a href="https://iphub.info/legal" rel="nofollow ugc">Privacy</a>
4. Google reCAPTCHA v3 (optional): bot protection on OTP forms. <a href="https://www.google.com/recaptcha/" rel="nofollow ugc">google.com/recaptcha</a> | <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy</a>
5. Cloudflare Turnstile (optional): alternative bot protection. <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">cloudflare.com/turnstile</a> | <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Terms</a> | <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Privacy</a>
<h4>Admin</h4>
<ul>
<li>Users Without Phone sub-page under the WordPress Users menu: lists all registered users missing a phone number, with a dynamic count badge on the menu item</li>
</ul>
<h4>Test Mode</h4>
Enable Test Mode in the Gateway settings to test without receiving real SMS messages. Messages are queued on the kwtSMS server but never delivered to the phone. Credits are still deducted. To recover them, log in to your kwtSMS account dashboard and delete the queued messages. The OTP code is visible under kwtSMS > Logs > Debug Log so you can complete flows during development.
<h4>Languages</h4>
Ships with English (default) and Arabic translations. The plugin admin UI and all user-facing strings are fully translatable.
<h3>Help & Support</h3>
<ul>
<li><a href="https://www.kwtsms.com/faq/" rel="nofollow ugc">kwtSMS FAQ</a>: Answers to common questions about credits, sender IDs, OTP, and delivery.</li>
<li><a href="https://www.kwtsms.com/support.html" rel="nofollow ugc">kwtSMS Support</a>: Open a support ticket or browse help articles.</li>
<li><a href="https://www.kwtsms.com/#contact" rel="nofollow ugc">Contact kwtSMS</a>: Reach the kwtSMS team directly for Sender ID registration and account issues.</li>
<li><a href="https://www.kwtsms.com/sender-id-help.html" rel="nofollow ugc">Sender ID Help</a>: Sender ID registration and guidelines.</li>
<li><a href="https://www.kwtsms.com/login/" rel="nofollow ugc">kwtSMS Dashboard</a>: Recharge credits, buy Sender IDs, view message logs, and manage coverage.</li>
<li><a href="https://www.kwtsms.com/integrations.html" rel="nofollow ugc">Other Integrations</a>: Plugins and integrations for other platforms and languages.</li>
<li><a href="https://github.com/boxlinknet/kwtsms-wordpress/issues" rel="nofollow ugc">Plugin Issues</a>: Report bugs or request features for this WordPress plugin.</li>
</ul>

kwtSMS: OTP & SMS Notifications

SMS OTP login, password reset, and WooCommerce order notifications via the kwtSMS gateway. Arabic RTL support included.

Mostafa Soufi

Navid Kashani

VeronaLabs

alifallahrn

Reza

<a href="https://wsms.io/?utm_source=wporg&utm_medium=link&utm_campaign=website" rel="nofollow ugc">WSMS</a> lets you send SMS/MMS notifications, one-time passwords (OTP), and two-factor authentication (2FA) messages straight from WordPress. It supports a wide range of SMS gateways and integrates with popular e-commerce and form builder plugins.
Use WSMS to: 
– Keep customers updated on WooCommerce orders 
– Collect subscribers with SMS newsletter forms 
– Secure logins with OTP & 2FA 
– Alert admins about new users, logins, or updates 
– Run marketing campaigns with scheduled or bulk SMS
👉 <a href="https://demo.wsms.io/wp-login.php" rel="nofollow ugc">Check out the demo</a> | <a href="#screenshots" rel="nofollow ugc">View screenshots</a> | <a href="https://wsms.io/gateways?utm_source=wporg&utm_medium=link&utm_campaign=gateways" rel="nofollow ugc">See supported gateways</a> | <a href="https://wsms.io/integrations?utm_source=wporg&utm_medium=link&utm_campaign=integrations" rel="nofollow ugc">Explore integrations</a> | <a href="https://wsms.io/docs/" rel="nofollow ugc">Documentation</a>
<h3>✨ Key Features</h3>
<ul>
<li>Send SMS/MMS: Send messages through your choice of supported SMS gateways.</li>
<li>E-Commerce & Form Integration: Seamlessly integrates with popular e-commerce platforms and form builders.</li>
<li>OTP & 2FA: Add extra login security with one-time passwords and two-factor authentication.</li>
<li>Mobile Login: Let users log in with their mobile number.</li>
<li>Admin Alerts: Get notified when new users register, posts are published, or WordPress updates are available.</li>
<li>Newsletters & Widgets: Build SMS newsletter forms with shortcodes, widgets, or Gutenberg blocks.</li>
<li>Two-Way SMS (All-in-One): Receive and reply to SMS messages inside WordPress.</li>
<li>Bulk & Scheduled SMS: Send to multiple recipients at once, immediately or on schedule.</li>
<li>Third-Party Integration: Connect with external services and automation platforms.</li>
<li>Messaging Button: Let visitors reach you instantly via messaging channels.</li>
<li>GDPR Compliant: Built with privacy and compliance in mind.</li>
</ul>
<h3>💎 Upgrade to WSMS All-in-One</h3>
Unlock additional features with All-in-One — the plan that gives you access to all premium add-ons in one package.
With All-in-One you get: 
– Secure login & registration with OTP & 2FA 
– Scheduled & recurring SMS/MMS 
– Two-way SMS inbox 
– Enhanced e-commerce features (login, checkout verification, order updates) 
– Membership platform integrations 
– Advanced form builder SMS capabilities 
– Marketing automation integrations 
– Booking system compatibility 
– URL shortening service integration 
– All future add-ons included
👉 <a href="https://wsms.io/pricing/?utm_source=wporg&utm_medium=link&utm_campaign=pricing" rel="nofollow ugc">See All-in-One details & compare features</a>
<h3>🐞 Report Bugs & Security</h3>
<ul>
<li>Found a bug? <a href="https://github.com/wp-sms/wp-sms/issues/new" rel="nofollow ugc">Open an issue on GitHub</a>.</li>
<li>Security concerns? Report them via the <a href="https://patchstack.com/database/wordpress/plugin/wp-sms/vdp" rel="nofollow ugc">Patchstack VDP program</a>.</li>
</ul>
<h3>📝 Trademark Notice</h3>
WooCommerce, GravityForms, Elementor, Contact Form 7, Twilio, WhatsApp, Clickatell, BulkSMS, Plivo, Zapier, Bitly, and other product names mentioned are trademarks of their respective owners. WSMS is not affiliated with, endorsed by, or sponsored by these companies.
<h3>Source Code and Build Instructions</h3>
Note: The plugin works out of the box — no build steps required for regular users. This section is for developers who want to modify or contribute to the source code. See the <a href="https://wsms.io/docs/" rel="nofollow ugc">full documentation</a> for user guides.
All source code for minified JavaScript and CSS is included in the plugin under the <code>resources/</code> directory. Build instructions and full source are available on <a href="https://github.com/wp-sms/wp-sms" rel="nofollow ugc">GitHub</a>.
<h4>Third-Party Libraries</h4>
<a href="https://github.com/chartjs/Chart.js" rel="nofollow ugc">Chart.js</a>, <a href="https://github.com/flatpickr/flatpickr" rel="nofollow ugc">flatpickr</a>, <a href="https://github.com/jackocnr/intl-tel-input" rel="nofollow ugc">intlTelInput</a>, <a href="https://github.com/DubFriend/jquery.repeater" rel="nofollow ugc">jquery.repeater</a>, <a href="https://github.com/qwertypants/jQuery-Word-and-Character-Counter-Plugin" rel="nofollow ugc">jQuery Word and Character Counter</a>, <a href="https://github.com/facebook/react" rel="nofollow ugc">React</a>, <a href="https://github.com/select2/select2" rel="nofollow ugc">Select2</a>, <a href="https://github.com/tailwindlabs/tailwindcss" rel="nofollow ugc">Tailwind CSS</a>, <a href="https://github.com/calebjacob/tooltipster" rel="nofollow ugc">Tooltipster</a>, <a href="https://github.com/veronalabs/wp-scoper" rel="nofollow ugc">WP Scoper</a>

WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce






many thanks to the development and support team



they worked hard and now i recommend everyone to buy this plugin



but if your are looking for more features like 2way sms and custom sms it is not the right choice for you










great plugin

Send SMS/MMS notifications, OTP & 2FA messages, and WooCommerce updates with support for multiple gateways and plugin integrations.

kwtSMS: OTP & SMS Notifications vs WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce