Skip to content
مرسال
Log in Try free
Home ›WordPress Plugin
rocket_launchMersal OTP — WordPress / WooCommerce plugin

Passwordless login for your site — over WhatsApp, SMS & Email

Mersal OTP turns WordPress & WooCommerce login, signup and verification into a one-tap experience — OTP codes or a WhatsApp confirm link, wearing the full Mersal design.

👈 Try the login on the right — type and enter the code yourself.

shield_lockSecure OTP boltSetup in minutes shopping_bagWooCommerce ready
Mersal dark_mode
Sign in

Choose a method to continue

mail Continue with email expand_more
Open WhatsApp and tap “Confirm sign-in”…
Open WhatsApp and tap “Confirm sign-in”…
Open WhatsApp and tap “Confirm sign-in”…
Works with
forum
0
Login methods
OTP, password, magic link, WhatsApp, SMS, Google
hub
0
Delivery channels
Email, WhatsApp & SMS — with auto-fallback
bolt
0
Seconds to set up
Install, connect Mersal, drop the shortcode
shield_lock
0
Security layers
Rate limit, lockout, captcha, geo-block & 2FA
Features

Everything you need for modern, secure login

A complete OTP engine, a polished UX, and anti-fraud tooling — in one lightweight plugin.

bolt

Passwordless login

OTP via Email, WhatsApp or SMS — no passwords to forget or leak.

chat

One-tap WhatsApp confirm

A confirm link/card inside WhatsApp signs the user in instantly — no code typing.

shopping_bag

WooCommerce integration

Checkout verification, phone-number sync, and cart restore after login.

call

Auto-correct numbers

Country-code picker (intl-tel-input), IP detection, and E.164 formatting.

shield_lock

Forced 2FA

Require a second factor for selected roles after a password login.

monitoring

Anti-fraud guards

Rate limits, lockouts, captcha, and country / disposable-number blocking.

mail

Magic link & password

Email as OTP, a one-click magic link, or classic password — your choice.

groups

Google sign-in

Full OAuth with account auto-linking and domain restriction.

image

Full brand styling

Colors, fonts, logos and light/dark themes — matched to your brand.

Try it yourself

A powerful dashboard and an elegant login

Not static images — live mockups you can actually use: switch dashboard tabs, flip the toggles, tap “Confirm” on WhatsApp, and verify a number.

yoursite.com/wp-admin → Mersal OTP checkSaved live
م
Mersal OTP
v1.5.0
Overview
monitoringDashboard
forumNotifications
Login methods
mailEmail
callPhone
groupsGoogle
Sending channels
hubConnect Mersal
chatWhatsApp
Data & security
groupsUsers
shield_lockSecurity
Authentication › Dashboard
Dashboard
pin
0
Codes today
trending_up
0
Delivery rate
verified
0
Verified users
OTP channels
Email
WhatsApp
SMS
↑ click a toggle
Live activity
mail a•••@gmail.com sent now
chat +20 10• ••• 88 verified 0:12
sms +966 5• ••• 09 sent 0:34
Primary email method
Allow sign-up
Auto-link by email
Require verification
hub
Mersal account connected
WhatsApp + SMS gateways ready to send
Connected
WhatsApp gateway
SMS gateway
Auto-fallback
UserPhoneStatus
Ahmed Ali +20 100 ••• 88 verified
Sara M. +966 55 ••• 09 verified
Omar K. +971 50 ••• 21 pending
Security layers
Rate limiting
Captcha (reCAPTCHA)
Country blocking
Anti-enumeration
Forced role 2FA

WhatsApp confirm flow

Tap the “Confirm sign-in” button in the message yourself.

M
Mersal OTP
online
more_vert
🔐 Confirm sign-in
A sign-in request for your account on yoursite.com
472 913
✅ Confirm sign-in
10:24 ✓✓
✓ Signed in · now ↻ replay

Confirm-number bar

Type a number, send the code, and enter it — fully working.

🟢 Confirm your phone number to secure your account.
check_circleYour number is verified. Thank you!
Full control

Dozens of options — all a toggle away

A settings panel organized into clear groups: Authentication, Login methods, Sending channels, Appearance & pages, and Data & security.

check_circleCode length & type (4–8, numeric/alpha)
check_circleCode expiry & attempt limits
check_circleLockout after failed attempts
check_circlePer-IP & per-number rate limits
check_circlereCAPTCHA / Turnstile / hCaptcha
check_circleBlock countries & disposable numbers
check_circleVPN/Proxy detection & optional HLR
check_circleSession length & single-session
check_circleDevice management & login alerts
check_circlePer-channel & per-event templates
check_circleFull login page + shortcodes
check_circlePer-role redirect rules
Get going

Live in 3 steps

1 bolt

Install the plugin

Upload mersal-otp and activate it from your WordPress admin.

2 hub

Connect Mersal

Click “Login by Mersal” to link your WhatsApp / SMS gateways automatically.

3 rocket_launch

Publish the login

Use [mersal_otp] or the auto-created auth page — and you’re done.

Subscription

Subscribe to this add-on on its own

A standalone add-on with its own gateways — no membership plan needed. And if you are already on a Mersal plan, it is included at no extra cost.

Monthly
500 EGP / month
Start and try — cancel anytime.
WhatsApp gateway via QR scan
WhatsApp Cloud API gateway
SMS gateway via Android SIM
SMS API gateway
SMTP email gateway
Unlimited sending from your linked sites
Link up to 3 WordPress sites
Updates & support for the whole subscription
Create an account & subscribe
⭐ Best value — save 50%
Yearly
3,000 EGP / year
Save 50% vs paying monthly.
WhatsApp gateway via QR scan
WhatsApp Cloud API gateway
SMS gateway via Android SIM
SMS API gateway
SMTP email gateway
Unlimited sending from your linked sites
Link up to 3 WordPress sites
Updates & support for the whole subscription
Create an account & subscribe
Prefer it bundled in a full plan with every channel? See all plans
FAQ

Everything you need to know before you start

Do users still need a password?expand_more
No. Login is fully passwordless via an OTP on Email, WhatsApp or SMS, or a magic sign-in link. You can also enable classic password login alongside them.
Yes. Optional checkout verification, phone-number sync with billing details, and cart restore after login are all built in.
Through the Mersal gateway: an official Meta WhatsApp (WABA) account or any number linked via QR — connected with one click, no manual API setup.
It passed a security review: constant-time code comparison, cryptographic tokens, CSRF protection, per-IP & per-number rate limits, lockouts, captcha, country / disposable-number blocking, and forced role-based 2FA.
Yes. Full Arabic/English UI with RTL, light & dark themes, selectable fonts, and brand colors and logos.
Minutes: install, click “Login by Mersal” to connect, then drop the [mersal_otp] shortcode or use the auto-created auth page.
shield_lockSecure by design

Built to hold up in production

Constant-time code comparison, cryptographic tokens, CSRF protection, and anti-enumeration — audited before release.

schedule
Constant-time compare
pin
CSPRNG tokens
shield_lock
CSRF-safe SSO
visibility
Anti-enumeration
bolt
Rate limits & lockout
verified
Role-based 2FA

Turn on passwordless login today

Download the Mersal OTP plugin and connect it to your account in minutes.