Glossary
What is a WhatsApp authentication message?
One-time passcodes on WhatsApp: the fixed authentication template format, copy-code and one-tap buttons, the authentication-international rate and common mistakes.
By Broadchat teamPublished Updated 2 min read
Definition
Authentication message: An authentication message is a WhatsApp template in Meta's authentication category, used only to send a one-time passcode for login, account verification or a sensitive action. Meta fixes most of the wording, and the template carries a copy-code or one-tap autofill button. It is charged per delivered message at the authentication rate, with a separate, higher authentication-international rate in some markets, including India.
Also called: OTP message, Authentication template, WhatsApp OTP
How a WhatsApp authentication message works
Your app or website generates a one-time passcode and calls the WhatsApp Business API with an authentication template, passing the code as the only variable. The customer sees a short, standard message from your verified business name and a button:
- Copy code: one tap copies the code so the customer can paste it into your app or website.
- One-tap autofill: on Android, the code can be handed straight to your app, so the customer does not type anything.
Unlike marketing and utility templates, you cannot write free text into an authentication template. Meta supplies the body ("123456 is your verification code") with optional add-ons such as a security warning and an expiry line. Links, media and promotional text are not allowed.
Worked example
Meera Finserv, a loan app in Jaipur, sends a login code when Priya signs in on a new phone:
The app accepts the code once and only for 10 minutes. If Priya does not have WhatsApp on that number, the app falls back to SMS. Keep a fallback: an authentication message can fail like any other message.
Billing and the international rate
Authentication is a charged category, priced per delivered message. In some markets, including India, Meta charges a higher authentication-international rate. Authentication also has monthly volume tiers across the business portfolio. See WhatsApp API pricing for current rates, and never put an offer into an OTP: anything beyond the code moves the message out of this category.
Authentication templates in Broadchat
Under CRM → WhatsApp Templates, choose the Authentication category. Broadchat builds the template in Meta's OTP shape with a copy-code or one-tap button, so there is no free-text body to get wrong. To send codes from your own system, use the channel access token and API described in the developer docs, or trigger the template from Automations → Workflow. Learn how template types differ in the message templates guide, and compare with a utility message for order or account alerts.
Sources
- Authentication templates — Meta for Developers, checked 12 October 2026
- Pricing on the WhatsApp Business Platform — Meta for Developers, checked 12 October 2026
Broadchat team · Product and partner success team
The people who build and support Broadchat, the white-label WhatsApp Business API platform. We write from what we see while onboarding partners and their clients on the official WhatsApp Cloud API, and we check every article against Meta's current documentation.
Last updated:
Frequently asked questions
Can I send an OTP as a utility template to save money?
No. One-time passcodes belong in the authentication category, and Meta reviews and re-categorises templates whose content does not match. Use the authentication template format with a copy-code or one-tap button.
Can an authentication message include a login link?
No. Authentication templates cannot contain URLs or media. Send only the code, with the optional security warning and expiry time that Meta provides.
What happens if the customer does not have WhatsApp?
The message cannot be delivered, so your app should fall back to SMS, email or a voice call after a short wait. Check the send result before showing the 'code sent' screen.