Can the WhatsApp Business App Send OTP Codes?
No, the free WhatsApp Business app cannot send OTP codes to your customers. Verification codes require an authentication template on the Cloud API. Here is why, and what to use instead.
Short answer: no, the free WhatsApp Business app cannot send OTP codes to your customers. The app is built for a person to chat by hand, not for your software to fire a verification code the instant someone logs in. To send OTPs you need the WhatsApp Cloud API with an approved authentication template, which lets your backend deliver a code programmatically. The app and the API are two different products, and only the API does OTP.
This trips up a lot of teams. They download the WhatsApp Business app, see the automation features, and assume they can wire it into their login screen. They cannot. Here is the real distinction and how to get verification codes flowing.
What the WhatsApp Business app actually does
The free Business app is a manual messaging tool. A person opens it and types replies. It has handy extras, a greeting message, an away message, quick replies, and a product catalog, but every one of those is a canned message a human sends or schedules, not a code your server generates on demand. There is no API behind the app. It cannot receive a login event from your website and turn it into a message. So the moment you need a unique code sent automatically at the exact second a user asks for it, the app is the wrong tool.
Why OTP needs the Cloud API
A one-time password is, by definition, generated on the fly and tied to a single login attempt. That requires software talking to software: your backend creates the code, then calls an endpoint to send it. Only the WhatsApp Cloud API exposes that endpoint. On top of that, Meta requires verification codes to use the authentication template category, a fixed-format message type that carries the copy-code and autofill buttons. The Business app has no concept of authentication templates. The API is the only route that has both the programmatic send and the template type OTP depends on.
If you want the mechanics, our WhatsApp OTP API page walks through the send request, the button options, and the pricing. The short version: your server POSTs the code to the /messages endpoint, and WhatsApp delivers it with a tap-to-fill button.
App vs API at a glance
- Sending: app is manual, a person types; API is programmatic, your software sends.
- OTP codes: app cannot do it; API sends them with an authentication template.
- Volume: app is one conversation at a time; API sends thousands automatically.
- Setup: app is install and go; API needs number registration and template approval.
- Cost: app is free to use; API charges the per-message authentication rate, about $0.0084 per code as a US benchmark.
Do you need to be a developer?
You need a backend that can make an HTTP request, but you do not need to build the whole Meta stack. Platforms like WaBulkSend sit on top of the Cloud API and handle number registration, template approval, and webhooks, so your team makes one clean request per code. Teams collecting and qualifying inbound leads often verify the phone number at intake the same way, using the API to confirm the contact is real before a rep ever picks it up.
What about receiving codes in the app?
Worth clearing up a related search: people also look for how to receive a WhatsApp verification code, meaning the code WhatsApp itself sends when you register a number. That is a different thing entirely, it is WhatsApp verifying your own number during signup, not you sending codes to customers. This article is about the second case, where your business sends OTPs to your users, and for that you need the API.
Moving from the app to the API
Registering a number on the Business Platform permanently removes it from the consumer and Business apps, and chat history does not carry over, so use a fresh number for your API and keep the app on a separate line if you still want a manual inbox. Once the API number is live and your authentication template is approved, you can send codes to US numbers, which the app could never do, and the same connection also handles order updates and appointment reminders.
The bottom line
The WhatsApp Business app is a manual chat tool and cannot send OTP codes to your customers. Verification codes require the Cloud API and an authentication template, which together let your backend deliver a code the moment a user logs in. If OTP is why you are looking at WhatsApp, skip the app and go straight to the API. See how it works on our WhatsApp OTP API page, or start free.