About this plugin
TextTango connects your WordPress or WooCommerce site to your TextTango account and sends SMS for the moments
that matter.
Sign in by phone
- Passwordless login with a one-time code, as a shortcode or on the WordPress login screen.
- Optional two-factor authentication, per role.
- Optionally require a customer to verify the phone number they check out with, on both classic and block
checkout, before an order can be placed. Off by default.
- Codes are hashed, single-use, rate limited per number and per address, and never written to the log in full.
WooCommerce order notifications
- Seven events — payment received, completed, on hold, cancelled, refunded, payment failed, and a staff alert
on a new order — each switched on separately with its own wording.
- A live character and segment count while you write, so you can see before sending whether a message costs one
SMS or two.
- Works with High-Performance Order Storage and block checkout.
Consent, kept properly
- An unticked consent box at checkout and in the customer’s account, recorded with a timestamp and a source.
- Optional double opt-in: agreeing sends one message to the number, and only an answer from that handset turns
it into permission.
- Order updates are treated as service messages and keep sending; marketing needs consent.
- A number the platform refuses is added to an opt-out list, and nothing is sent to it again.
Marketing that respects the opt-out list
- Send one message to everyone who agreed, with a review step showing recipients, cost and who was excluded —
and why — before anything is spent.
- The audience is built from your own consent records, so somebody who opted out an hour ago is left out.
- Basket reminders for signed-in customers who left without buying, cancelled the moment they order.
- Coupon campaigns that check the code is live and warn you if there is not enough of it to go round.
- Choose a campaign’s audience: your consenting customers, numbers you supply, or both. Supplied numbers are
still filtered through your opt-out list, and using them is recorded against your name.
Delivery receipts you can prove
- A signed webhook endpoint, registered with TextTango from the settings screen.
- A test event you can fire and watch arrive, so the loop is proven rather than assumed.
- A self-healing poller for receipts that never turn up.
Spending you can bound
- Daily, monthly and per-number caps, with a per-number cap that catches a loop aimed at one customer.
- Marketing pauses first when the balance runs low. Sign-in codes are never held back by any limit.
- A circuit breaker that stops waiting on an API that is not answering.
Built to be built on
- A public PHP API: texttango_send_sms(), texttango_is_connected(), texttango_get_balance(),
texttango_normalize_phone().
- Documented actions and filters, and six WP-CLI commands.
- An audit trail of who changed what — never of what a credential was.
Safe by default
- Sandbox mode turns itself on outside production, so a staging clone never texts a real customer.
- Every notification is off until you switch it on, so connecting the plugin texts nobody by itself.
- Credentials are encrypted at rest and never reach JavaScript or any REST route.
The plugin is a thin client of the TextTango v2 API. You need a TextTango account and an API token, created in
the TextTango dashboard under Profile → API Tokens.
External services
com/docs/api/v2), operated by
TextTango (rCodez). Every SMS the plugin sends — a sign-in code, a checkout verification code, a WooCommerce
order notification, a form-submission alert, or a marketing campaign message — is delivered through this API, so
it is required for the plugin’s core functionality.
What is sent, and when: the recipient’s phone number and the text of the message, sent at the moment each of
those events fires (for example, the instant a customer requests a sign-in code, or the instant an order changes
status and a notification is due). No other personal data is sent. TextTango sends delivery status back to the
site over a webhook the site owner registers from the Setup screen, so the plugin can show whether a message
was delivered.
com/terms), Privacy Policy
com/privacy).