Registration & Login with Mobile Phone Number

Registration & Login with Mobile Phone Number

Allow customers to register and log in to your WooCommerce store with a phone number OTP. Supports Firebase, MSG91, Twilio, and WhatsApp Meta Cloud API.

Registration & Login with Mobile Phone Number is a WooCommerce plugin that lets shoppers register, log in, and link accounts using a one-time password (OTP) sent to their mobile phone.

Configure everything under WooCommerce → Settings → Login With Phone. WooCommerce is required.

OTP providers

Choose one SMS / messaging provider:

• Firebase — client-side phone authentication (optional hide for the Firebase reCAPTCHA badge)
• MSG91 — server-side OTP send, verify, and resend
• Twilio — Twilio Verify API (SMS). Use live Account SID and Auth Token (not Twilio test credentials)
• WhatsApp Meta Cloud API — server-generated OTP delivered via an approved WhatsApp template; verification is handled locally (no Meta webhook)

Customer experience

• Phone OTP login and registration for guests
• Optional email-gated registration for new phone numbers: email OTP via wp_mail, or link an existing account with email + password
• Change phone number on My Account (Edit Account)
• Login form on My Account and Checkout (classic and block/Store API aware), with options to hide or disable those placements
• Optional checkout gate: require login before checkout; optionally hide customer/payment fields until the customer is logged in
• Checkout field values can be restored after login reload
• Shortcode to place the login form anywhere: [fme_lwp_display_login_form]
• International phone input with configurable allowed country codes
• Cart snapshot and restore around login when needed

Security & limits

• Failed OTP attempt limits (attempts + time window)
• Successful login count limits (count + time window)
• Google reCAPTCHA for non-Firebase providers
• Optional OTP countdown / resend timeout UI

Store branding

• Custom form labels, placeholders, button text, and front-end messages
• Button and modal colors
• Optional hide of default WooCommerce login/register forms

WhatsApp Meta Cloud API

When WhatsApp Meta is selected:

• Enter Access Token, Phone Number ID, and WABA ID
• Fetch Templates loads APPROVED templates from Meta; pick one to save name, language, and template metadata
• Body preview shows the template body (including placeholders) before you go live
• There is no separate Test mode. Use Meta’s sample hello_world from the same approved-template picker to check connectivity (zero body parameters). For production OTP, use an Authentication template with OTP placeholders (e.g. {{1}})
• OTP is generated by the plugin, stored briefly, and verified locally after the customer enters the code

Compatible with WooCommerce High-Performance Order Storage (HPOS). Text domain: login-with-phone-number.

Was es mitbringt

• Shortcodes: [fme_lwp_display_login_form]
• Integration mit WooCommerce

Installation

1. Upload the plugin folder to /wp-content/plugins/, or install the ZIP via Plugins → Add New.
2. Activate the plugin through the Plugins screen. WooCommerce must be active; otherwise the plugin deactivates itself with an admin notice.
3. Go to WooCommerce → Settings → Login With Phone.
4. Select an OTP provider and enter its credentials (Firebase, MSG91, Twilio, or WhatsApp Meta).
5. Configure display placement (My Account, Checkout, shortcode), security options, labels, and colors as needed.
6. For WhatsApp Meta: save Access Token and WABA ID, click Fetch Templates, select a template, confirm the body preview, then save settings.
7. Test login/registration on My Account or Checkout (or via [fme_lwp_display_login_form]).

Faq

Does this plugin require WooCommerce?

Yes. It will not stay active without WooCommerce.

Where are the settings?

WooCommerce → Settings → Login With Phone.

Which OTP providers are supported?

Firebase, MSG91, Twilio (Verify), and WhatsApp Meta Cloud API. Only one provider is used at a time.

How do I show the login form on a custom page?

Add the shortcode [fme_lwp_display_login_form]. You can also disable the built-in My Account and/or Checkout placements if you only want the shortcode.

Can new customers register with phone only?

Yes, when email restriction is off. When email restriction is on, new phone numbers must complete email OTP registration or link an existing account.

How does WhatsApp OTP verification work?

The plugin generates the OTP, sends it with your approved WhatsApp template via Meta’s Cloud API, and verifies the code locally against a short-lived store. There is no Meta webhook and no separate Test mode option.

How do I test WhatsApp connectivity?

In the WhatsApp template picker, select Meta’s sample hello_world (create/approve it in Meta if needed). That path has no body parameters and is suitable for a connectivity check. Use an Authentication OTP template for live logins.

Why doesn’t Twilio work with test credentials?

This plugin uses the Twilio Verify API, which requires live Account SID and Auth Token. Twilio test credentials are not supported for Verify.

Is Google reCAPTCHA available?

Yes, for providers other than Firebase. Firebase uses its own reCAPTCHA flow (you can hide the badge if desired).

Can customers change their phone number later?

Yes. A change-phone form appears on the WooCommerce Edit Account screen when My Account display is enabled.

Upgrade Notice

1.3.7

Adds WhatsApp Meta Cloud API as an OTP provider. Review Login With Phone settings after updating if you plan to use WhatsApp.

Installieren

composer require meteorgpl-plugin/registration-login-with-mobile-phone-number

Die Lizenzprüfungen des Anbieters sind unverändert: Aktivieren Sie das Plugin in WordPress mit einem beim Anbieter gekauften Lizenzschlüssel.

Lizenz

Deklarierte Lizenz: GPL-2.0-or-later. Der Code wird unter der Lizenz weiterverbreitet, die der Anbieter in den eigenen Headern des Plugins deklariert hat. Lizenzprofil: gpl-full.

Grafiken, Schriften, Medien und Dokumente, die möglicherweise separat lizenziert sind, werden nicht weiterverbreitet; die Lizenzseite erklärt, was ersetzt oder entfernt wird, und der Sicherheits-Tab listet es pro Version auf. Der Anspruch auf Support und Updates ergibt sich aus der Lizenz, die Sie beim Anbieter kaufen.