WhatsApp OTP and authentication templates
WhatsApp OTP delivery is now 60-70% cheaper than SMS in most markets, with 3x faster delivery and built-in fraud protection. Meta introduced the AUTHENTICATION category in 2023 specifically for one-time passcodes, login codes, and 2FA — and these templates approve in minutes if you follow the strict format.
The templates below use the official OTP button type, which lets the user copy the code with one tap or auto-fill it into your app. Custom OTP messages outside this format will be rejected.
When to use
Login verification, signup verification, password reset, payment authentication, account recovery, sensitive action confirmation.
Approval tips
- • Category MUST be AUTHENTICATION (not UTILITY or MARKETING).
- • Body must be a fixed template — Meta provides preset wording you can lightly customize.
- • Only one variable allowed: the code itself.
Best practices
- Always use the OTP button type — it enables one-tap copy/autofill.
- Code expiry: communicate it in the message (5 or 10 min standard).
- Don't bundle marketing copy ('Welcome to our app!') into the OTP — instant rejection.
- Use the same sender phone number for all OTPs from the same brand. Inconsistent senders trigger spam flags.
6 copy-paste templates
Submit each as a new template in your WhatsApp Business Manager. Variables ({{1}}, {{2}}) populate from your CRM at send time.
{{1}} is your verification code. For your security, do not share this code.Standard login OTP. Use one-tap autofill button for mobile apps.
{{1}} is your verification code. This code expires in 10 minutes.Adds explicit expiry — reduces support tickets from delayed login attempts.
{{1}} is your password reset code. If you didn't request this, ignore this message.Password recovery flow.
{{1}} is your payment verification code. Use it only on our checkout page.Payment 2FA — highest fraud risk, message should never include amount or merchant.
{{1}} आपका वेरिफिकेशन कोड है। सुरक्षा के लिए, इस कोड को किसी से साझा न करें।Hindi OTP for Indian users.
{{1}} es tu código de verificación. Por seguridad, no compartas este código.Spanish OTP for LATAM markets.
FAQs
How much does a WhatsApp OTP cost vs SMS?
In India, WhatsApp AUTHENTICATION conversations cost ~₹0.12-0.16 vs ₹0.20-0.40 for SMS. In Brazil and Indonesia the savings are even larger.
What if WhatsApp delivery fails?
Implement an SMS fallback after 30 seconds. Use a routing layer that tries WhatsApp first, SMS second.
Is WhatsApp OTP secure enough for banking?
Yes — the OTP button uses end-to-end encryption and a verified business sender. Several major banks in India, Brazil, and Mexico use WhatsApp OTP.
Can I customize the body text?
Only within Meta's preset variations. Custom wording outside the approved shape gets rejected.
Do AUTHENTICATION templates need opt-in?
Yes, but service consent (a checkbox saying 'I agree to receive verification messages') is sufficient. Marketing consent is not required.
Can I send multiple OTPs to the same user back-to-back?
Yes, but each one is billed separately. Implement rate limiting on your side — Meta will flag senders firing >5 OTPs per user per hour.
Skip the manual setup. Use LandinChat.
Official Meta Tech Partner powering WhatsApp marketing for 500+ businesses worldwide. Pre-built otp verification flows, broadcasts, chatbot, shared inbox — one flat plan.
See pricing