Authyo Authentication and Notification for WooCommerce

Yes. This plugin uses the Authyo.io API to send OTPs and notifications. You need a free account at authyo.io. After signing up, generate your Client ID and Client Secret from the Authyo dashboard and enter them in the plugin settings.

Authyo.io offers a free plan. Paid plans are available for higher volumes. Visit authyo.io for current pricing details.

You can send OTPs via Email, SMS, WhatsApp, and Voice Call. Enable one or multiple channels in the plugin settings. You can also set a priority channel and configure automatic fallback so if one channel fails, another is tried automatically.

Yes. Customers can enter either an email address or a mobile phone number. The plugin automatically detects which one is entered and routes the OTP to the right channel.

Yes. The phone number field includes a country code selector with support for countries worldwide. The available countries are loaded from the Authyo API and cached locally. You can also restrict the dropdown to specific countries from the plugin settings.

Yes. The plugin includes universal theme compatibility CSS that overrides common theme conflicts. The forms are designed to adapt to your theme's styling. The checkout OTP field integrates with both the classic WooCommerce checkout and the Gutenberg-based Checkout Block.

Yes. The OTP login form is added only to pages where you place the shortcode. The default WooCommerce login form remains untouched unless you choose to replace or hide it. Both methods can coexist.

If the primary delivery channel fails, the plugin can automatically retry using a fallback channel (for example, trying SMS if WhatsApp fails). Customers also see a "Try another method" option in the form to manually request the OTP via a different channel.

Yes. You can set the OTP expiry time between 10 and 600 seconds from the plugin settings. The default is 60 seconds.

You can configure a maximum attempt limit (1–20 attempts) and a lockout period (1–1440 minutes). Once the limit is exceeded, the customer is temporarily blocked from attempting again. The counter resets automatically after the lockout period.

Yes. The plugin logs every OTP send and verification attempt. You can view the full log under Authyo OTP → OTP Logs in your admin panel, including the email/phone used, status, IP address, and timestamp. Logs can be bulk deleted.

No. Verification happens via AJAX in the background. The customer enters and submits their OTP before placing the order, so there is no delay at the point of order creation. Verification state is stored in a server-side session, not in the form, so it cannot be bypassed by manipulating form data.

Yes. The plugin includes a testing bypass mode. You can add specific email addresses and phone numbers to a whitelist — for those entries, the OTP step is skipped and verification always succeeds. This lets you test your checkout flow without consuming API credits.

Yes. The plugin is tested with the latest WooCommerce release and declares compatibility with WooCommerce HPOS (High-Performance Order Storage) and the WooCommerce Checkout Block.