Key Takeaways
- WordPress Android SMS gateway OTP flow is your theme/plugin or custom mu-plugin calling REST HTTPS — not an official SMS Gateway WordPress.org product unless you published one.
- Keep API keys in wp-config / server env — never in the database options UI for public sites.
- OTP TTL and attempt limits live in WordPress (or your IdP). Accept ≠ delivered.
- Isolate OTP SIMs from WooCommerce promo SMS.
- You bring the phone and operator airtime. We meter devices and send volume.
HTTP glue, not our WordPress product
WordPress Android SMS gateway OTP flow: on login or checkout verify, WordPress calls your small bridge (or wp_remote_post directly) to the Android SMS gateway API. Product OTP: OTP verification. API hub: Android SMS gateway API. Live fields: Developer Center.
Calling it “our WordPress plugin” without a listing is sales fiction — call it a bridge and keep the key out of the options table.
What we do not claim
Not an official WordPress.org product unless published. Not WooCommerce SMS credits from us. Third-party plugins may exist — evaluate them separately. External: WordPress plugin handbook.
OTP flow pieces
| Hop | Owner | Failure |
|---|---|---|
| WP event | Login / form hook | Firing on every page load |
| Bridge | Code gen, TTL, rate limit | Key in wp_options publicly |
| Gateway REST | Bearer send; persist id | Treating 200 as delivered |
| Android + SIM | Radio + airtime | Empty prepaid / OEM kill |
wp_remote_post pattern
Server-side only. Timeouts set. Idempotency for retries. PHP samples: PHP HTTPS/JSON. Multi-device: multi-device and dual SIM.
Cost
Devices plus SMS send volume. Operator airtime is yours. WordPress hosting bills are separate. Free: 1 device / 300 SMS lifetime. Starter, Professional, and Business list Unlimited SMS as platform send volume; that is not unmetered carrier SMS.
Checklist
- No official plugin claim without a listing.
- Keys in env / wp-config; not public options.
- OTP TTL + attempt caps in WP.
- OTP SIM isolated from promo plugins.
- Developer Center fields confirmed.
Next steps
pricing, setup, WordPress order alerts.
Related product pages
Jump to the live product docs for this topic—not another long-form article.
- OTP and 2FA SMS on AndroidAuthentication flows
- SMS API documentationLive endpoint reference
- device and SMS volume pricingPlans and allowances
- Android SMS gateway product guideDefinition, product, and how to buy
