How to set up WP 2FA SMS OTP 3rd party integrations

WP 2FA supports SMS as a two-factor authentication (2FA) method. When users choose this method, they receive a one-time password (OTP) by SMS and enter it when authenticating.

WP 2FA generates the OTP, while an SMS provider delivers the message. You can integrate WP 2FA with Twilio or Clickatell for SMS delivery.

In this guide, we explain how to set up Twilio or Clickatell, connect the provider to WP 2FA, and enable SMS as an authentication method for your users.

Important note: SMSs are sent via the account service provider, which requires account credit. While we endeavor to provide accurate information at all times, Clickatell and Twilio may change the sign-up process at their discretion. Should you notice any discrepancies, kindly get in touch for up-to-date information.

Set up Twilio

Twilio provides the SMS service that WP 2FA uses to deliver one-time passwords to your users.

If you want to use Twilio with WP 2FA, first create and configure a Twilio account.

Step 1: Create a Twilio Account

Go to twilio.com and then click on the Start for free button. Enter your information in the provided fields, then proceed to set up the account.

Twilio will then send you a verification email, which you must verify to continue with your account setup.

Once you verify your email, you will also need to verify your phone number, which you can do via SMS or a phone call.

Step 2: Complete the Twilio account setup

After verifying your email address and phone number, Twilio may ask you several questions about how you plan to use the service.

Complete these steps according to how you intend to use your Twilio account.

Step 3: Get a Twilio phone number

To send SMS messages through Twilio, you need to get a Twilio number or supported sender ID.

In your Twilio account, go to Phone Numbers > Active numbers and click Buy a number.

The phone number or sender ID you configure here is what WP 2FA will use when sending one-time passwords.

Note: In the From phone number specify the phone number or alphanumeric sender ID from which the one-time password will be sent. This must be registered with your Twilio account. It is important to note that Alphanumeric sender IDs have regional restrictions and may not be supported in all countries. Refer to Twilio's Phone Numbers documentation and Alphanumeric Sender ID documentation for more information.

Step 4: Get your Twilio account details

You now have everything you need to connect WP 2FA to Twilio. Before heading to your WordPress website, make sure you grab the:

• Account SID
• Authy Token
• My Twilio phone number or alphanumeric ID.

Once you have them, continue to the Connect Twilio or Clickatell to WP 2FA section below.

Set up Clickatell

Clickatell can also provide the SMS service used by WP 2FA to deliver one-time passwords.

To use Clickatell, first create an account and configure its SMS channel.

Step 1: Create a Clickatell account

To get started, head to clickatell.com and create an account. At the time of writing, Clickatell is offering a trial account, which you can sign up for by clicking the Try for free button in the top-right corner of the page.

Fill in and submit the sign-up form, at which point Clickatell will send you a verification email to the email address used in the sign-up form.

Click the Verify now button in your email, and you’ll be redirected to your account.

Step 2: Set up SMS channel

Once your Clickatell account is ready, set up the SMS channel that WP 2FA will use to send one-time passwords.

First, navigate to Products & Services > Channels and then click on SMS.

Next, click on + Activate Channel. This automatically activates the SMS channel for you. You’ll be notified through the SMS Successfully Added to My Workspace pop-up window. Click on the View in My Workspace button to go to your workspace.

Step 3: Configure the SMS channel

From My Workspace, select SMS and complete the Clickatell SMS configuration process.

During this process, you will create the SMS API integration and generate an API Key.

Copy the API key, as you will need it to connect WP 2FA to Clickatell.

Connect Twilio or Clickatell to WP 2FA

Once your Twilio or Clickatell account is configured, you can connect it to WP 2FA.

From the WordPress dashboard, navigate to WP 2FA > Settings > 2FA provider integrations.

If you would like to configure Twilio, click on the Twilio tab. If you would like to configure Clickatell, click on the Clickatell tab.

• For Clickatell, enter the API Key in the appropriate field.
• For Twilio, enter the Account SID, Auth token, and Twilio number or Alphanumeric ID in the appropriate fields.

Click on the Verify Connection button to make sure all data has been entered correctly and that the plugin can connect to the API.

Once ready, click on Save Settings.

Final step

Connecting Twilio or Clickatell does not automatically make SMS authentication available to your users. You also need to enable SMS as an authentication method in your 2FA policy.

Go to WP 2FA > 2FA Policies > Sitewide 2FA policies and enable the SMS authentication method.

Once SMS authentication is enabled, users covered by that policy can select SMS when configuring their 2FA method.