OTPs that arrive, and codes that stay secret.
You create the code and verify it in your own system. Hopwire delivers it on WhatsApp first, moves to SMS when WhatsApp fails or is slow, and keeps the same code and expiry.
What you get
Same code, same expiry
If WhatsApp fails or times out, the SMS carries the same code with the original expiry. Retries and fallback never extend it.
The code never shows up anywhere
Codes are encrypted for the send and deleted once the message finishes. They are masked in logs, the audit trail and webhooks.
Autofill on Android
SMS versions support the Android SMS Retriever format, and WhatsApp authentication templates support the copy-code button.
Protection against OTP pumping
Limits per recipient and per number range stop bursts of fake OTP requests, with a Retry-After so honest clients can wait.
Short, explicit expiry
OTPs expire 10 minutes after acceptance by default. You can set anything from 30 seconds to an hour.
One-tap and zero-tap
At launchWhatsApp one-tap and zero-tap autofill, plus domain-bound codes for iOS and the web.
OTP delivery reports
Release 2See OTPs delivered within your target window, and conversion when you send verification results back.
How it works
Generate the code
Your backend creates the code and keeps what it needs to check it.
Send it
Call messages.send with your OTP template and the code as a variable.
WhatsApp first
Hopwire sends on WhatsApp. If it fails or is not delivered in time, the same code goes by SMS.
Verify in your app
The user enters the code and your system checks it. Hopwire has already deleted its copy.
Questions
Does Hopwire generate or verify codes?
No. You generate and verify them. Hopwire only delivers them, which keeps the code under your control.
How long does it wait before falling back to SMS?
By default 30 seconds after the WhatsApp attempt for OTPs, or sooner when WhatsApp reports a failure. It is a platform default.
Can an OTP be sent twice by mistake?
Retries with the same idempotency key never send twice. If a provider does not answer, Hopwire marks the message unknown instead of resending.
Can I schedule an OTP?
No. Scheduling is for transactional messages. OTPs go out as soon as they are accepted.
Related
- RoutingAvailableEvery message tries WhatsApp and falls back to SMS after a confirmed failure or timeout. Override the channel per send.
- Security controlsAvailableOTP fraud limits, India-only destinations, emergency stop, mandatory MFA and roles for your team.
- WhatsAppAvailableSend OTPs and transactional messages from your own WhatsApp Business number, with SMS as the fallback.
- FintechAvailableLogin and transaction OTPs with pumping protection, plus account alerts on WhatsApp and SMS, with a trail for every message.
Start with the beta.
Hopwire is free during the invite-only beta. Tell us what you send and we will reply by email.