Skip to content

WhatsApp 2FA for Keycloak

wa2fa

A Keycloak 26.x plugin that delivers OTPs over WhatsApp via the Meta Cloud API. Drop-in. No SMS bill.

A Keycloak 26.x plugin that integrates WhatsApp via the Meta WhatsApp Cloud API. Drop it in, configure once, and your existing realms can deliver OTP, login alerts and verification flows over WhatsApp.

// Features

  • 01

    WhatsApp OTP

    Delivers a six-digit code as a Keycloak Authenticator step.

  • 02

    Phone verification

    A Required Action that confirms the user's number in one tap.

  • 03

    Login alerts

    An Event Listener that notifies the user every time their account is accessed.

  • 04

    QR scan verification

    Optional Realm Resource Provider with webhook callback.

  • 05

    SMS fallback

    Optional HTTP fallback when WhatsApp delivery fails.

// Specifications

Keycloak
26.x (Quarkus)
Java
17+
Maven
3.9+
Languages
EN, HI, ES, FR, DE, AR, PT
Version 1.1
Meta-only
License
Apache-2.0