previous icon Back to blog
Jun 19, 2023
5 minutes read

WhatsApp Business One Time Passwords: What They Are and How to Use Them.

Chances are that you've received One Time Passwords (OTPs) before, often via SMS or email. But did you know that there might be an even better platform to send OTPs on? WhatsApp Business Platform allows you to send One Time Passwords on the favorite messaging channel of your customers, enhancing the customer experience and improving customer relations.

WhatsApp is currently one of the most popular social apps. It's considered a titan among messaging channels, with two billion people across the world using WhatsApp on a monthly basis, sending about 100 billion messages each day! WhatsApp Business Platform is already known to be a great tool for customer communication, with its global reach and enticing features, but did you know it's also possible to send One Time Passwords?

One Time Passwords (OTP) via WhatsApp

Traditionally, we're used to receiving One Time Passwords for two factor authentication via SMS or email, but these text messages aren't encrypted. Hackers aim to intercept OTPs, and these unencrypted messages tied to your phone number can be the victim of phishing or social engineering fraud.

Hence, businesses are looking for new ways to send these OTPs to their customers, with as low risk as possible. And that's where WhatsApp Business Platform comes in handy!

One Time Passwords via WhatsApp are end-to-end encrypted and secure, making it one of the safest options out there, and the innovative features and global reach make for a great customer experience. The seamless use of OTP message templates allows you to initiate contact with your customers, verifying their identity at multiple touchpoints during their customer journey, such as login, account registration, or account recovery.

It's good to know that WhatsApp Business identifies 4 conversation categories: service (user-initiated), utility (business-initiated), marketing (business-initiated), and authentication (business-initiated). OTP message templates belong to the authentication conversation category (and will also be priced as such).

Benefits of WhatsApp Business OTP

Some key benefits of One Time Passwords via WhatsApp Business Platform:

  1. Reach: WhatsApp is immensely popular, and utilizing the favorite messaging channel of your customers will increase the experience with your business. Your customers are already familiar with WhatsApp. Now they can use the app they are already using for communication for OTPs.

  2. Communication: Customers can easily communicate and ask questions over WhatsApp if they encounter any issues in the authentication process.

  3. Security: WhatsApp OTPs are end-to-end encrypted, making them more difficult to intercept or misuse compared to traditional channels.

How to Start Sending OTP via WhatsApp

First, you need access to the WhatsApp Business Platform. You can sign up for a WhatsApp Business account via a Business Service Provider (BSP) like CM.com. Are you already using WhatsApp for your business? Then setting up the OTPs will be easy-peasy.

To start sending OTPs, you need to use an authentication template with a One Time Password button (OTP) to deliver the password or code. You can use a pre-existing authentication message template, or create your own and submit it for approval. OTP templates have some requirements they need to meet, as explained below.

Authentication Templates with OTP Buttons

Authentication message templates with OTP buttons generally look as followed:

  • Preset authentication message template fixed text:

    • <VERIFICATION_CODE> is your verification code.

    • Security disclaimer (optional): For your security, do not share this code.

    • Expiration warning (optional): This code expires in <NUM_MINUTES> minutes.

  • Button: Either a copy code or one-tap autofill button.

1234 is your verification code. Please do not share this code for your own safety. This code will expire in 10 minutes.
[Copy Code]

In OTP authentication conversation messages, URLs, media, and emojis are not supported. Because the messages consist of only text and buttons, the risk that they will be paused or delayed is minimized.

Buttons

As stated above, Authentication templates have to include either a copy code or one-tap autofill button. The difference between these two buttons is how they behave after being tapped by your customer:

  • A copy code button copies the One Time Password or code to the customer's clipboard. They can then manually switch to your app and paste the password or code into your website or app.

  • A one-tap autofill button automatically loads and copy+pastes the One Time Password in your website or app.

The one-tap buttons offer the best user experience, but they are currently only supported on Android, and they might require some extra IT development to make them work.

WhatsApp OTP Best Practices

Congratulations, you've created your first OTP message template! Here are some best practices to keep in mind:

  • Confirm the WhatsApp phone number of your customer before sending the One Time Password to that number.

  • Make sure to manage the customer's expectations. Let them know that the code will be delivered to their WhatsApp phone number, especially if your business offers multiple ways to receive OTPs.

  • Once the customer has successfully entered the code or OTP to your website or app, let them know that your business received it and whether or not the code was correct.

Start Sending Your OTP via WhatsApp

Increased security with a global reach and customer relationship enhancement over the favorite messaging channel of your customers? Who would say no to that? Are you also excited to get started with WhatsApp One Time Passwords? Talk to one of our experts to request a demo and find out everything you need to know about pricing, implementation, or anything else you might need.

Start with WhatsApp OTP Today!

Was this article interesting?
Share it!
Christel Brouwers
Copywriter at CM.com. Passionate about language and getting CM.com’s message out there. Shares content about CPaaS, Payments and more.

Latest Articles

drive-engagement-and-convert-your-conversations-with-whatsapp-carousel
Feb 01, 2024 • WhatsApp

Drive Engagement and Convert Your Conversations With WhatsApp Carousel

Are you already talking to your customers on WhatsApp? You really should! WhatsApp Business Platform, the business communication platform of one of the most popular messaging channels in the world today, has a wide selection of powerful engagement tools to enhance customer communication and boost sales. And they've added another innovative feature under their belt: WhatsApp Carousel.

WhatsApp vs Facebook Messenger
Jan 17, 2024 • Instant Messaging

WhatsApp vs Facebook Messenger: Which Messaging Channel is Best for What?

WhatsApp and Facebook Messenger are both established messaging channels for customer engagement. But what are the differences? Which advantages does each channel have for what business use case? Let's dive into the details

Ads That Click to WhatsApp
Jan 17, 2024 • Marketing

Ads That Click to WhatsApp: What Are They and What Are the Benefits?

Successful marketing means creating personal and conversational experiences for your customers. And what better place to meaningfully connect to your customers than on their favorite social media platforms and channels such as Facebook, Instagram and WhatsApp? With ads that click to WhatsApp, aka click-to-chat WhatsApp ads, you can offer your customers the direct and personal engagement that they crave. Read all about it!

WhatsApp Pay
Jan 08, 2024 • WhatsApp

Flexible, Functional, and Rich Interactions with WhatsApp Flows

WhatsApp Business Platform is adding another new and exciting feature to its repertoire: WhatsApp Flows. But what is it and what can you do with it? Let's take a look!

WhatsApp vs SMS: A Comparison For Businesses
Nov 30, 2023 • SMS

WhatsApp vs SMS: A Comparison For Businesses

WhatsApp and SMS are both immensely popular messaging channels. Both have their own unique traits, use cases, and added business value. We probably all acknowledge this, but what are the differences between these two exactly? What are the similarities? And more importantly, which one will add the most value to your business? In this blog we'll dive into the world of WhatsApp vs SMS.

introducing-payments-on-whatsapp
Nov 23, 2023 • WhatsApp

Introducing Payments on WhatsApp for the Ultimate End-To-End Customer Experience

Payments are the newest addition to WhatsApp Business Platform's impressive repertoire of powerful customer engagement tools. In this blog we'll introduce how payments on WhatsApp work, and discuss the benefits.

mfa-sso-blog-hero
Nov 06, 2023 • Authentication

MFA/2FA vs. SSO: Navigating the Digital Security Landscape

In today's interconnected world, the importance of robust digital security cannot be overstated. As businesses and individuals grapple with increasing cyber threats, the choice of security measures becomes crucial.

black-friday-channels
Oct 31, 2023 • Messaging

Boost Black Friday Sales with WhatsApp, Instagram and Facebook

Black Friday stands out as one of the most anticipated shopping events of the year, with online sales growing 3.5% to $65.3 billion globally in 2022. With this, big and small businesses will strive for maximum exposure. Yet, this task is far from straightforward. Retailers must compete to be visible, overcome high advertising costs, and meet escalating customer expectations to cut through the noise and drive conversion. Moreover, every touchpoint in the customer journey represents a make-or-break opportunity to form relationships and drive transactions, or risk losing a consumer’s interest and trust.

customer lifetime value touch points in the journey blog explain
Oct 20, 2023 • Email

What Is DMARC and How Do You Implement It?

In our digital age, email threats loom large, with phishing and spoofing becoming increasingly sophisticated. DMARC is the powerful shield that businesses and individuals need. This authentication protocol ensures email integrity, safeguarding against domain impersonation and cyberattacks. In this article, we demystify DMARC, explaining its significance in bolstering email security.

Is this region a better fit for you?
Go
close icon