Skip to main content

Logging In to Wabixo & OTP Authentication

Summary​

Wabixo uses secure, passwordless authentication. When an organization purchases Wabixo, their organization workspace, Tenant ID, and WhatsApp Business (WABA) phone numbers are fully provisioned and mapped by the onboarding team. There is no public self-signup or manual phone number mapping required.

Team members log in using their registered business email address and a 6-digit One-Time Password (OTP) delivered to their inbox. Upon login, authorized team members immediately gain access to their shared team inbox, mapped WhatsApp numbers, and workspace tools according to their assigned role permissions.

1. How Logging In Works​

Wabixo's authentication is fast, secure, and password-free:

  • Pre-Configured Access: Your organization's administrator or onboarding specialist registers your work email address under your company's tenant workspace.
  • Passwordless Security: Eliminates the risk of compromised, reused, or forgotten passwords.
  • 10-Minute Code Validity: Every 6-digit verification code generated is valid for exactly 10 minutes (600 seconds).
  • Automatic Session Restoration: Once logged in on a trusted browser, Wabixo securely stores your active session (wabixo_session) so you do not need to re-authenticate every time you open the app.

2. Step-by-Step Login Instructions​

Step 1: Open the Login Portal​

  1. Open your web browser (Google Chrome, Microsoft Edge, Mozilla Firefox, or Apple Safari).
  2. Navigate to your organization's Wabixo login portal: 
    https://app.wabixo.com
  3. (Optional) Use the theme toggle button in the top-right corner to switch between Light Mode and Dark Mode.

Step 2: Request Your Verification Code​

  1. In the Work Email field, enter your registered company email address.
  2. Click Continue with Email (or press Enter).
  3. Wabixo immediately generates a unique 6-digit code and dispatches it to your email inbox.

Step 3: Enter the 6-Digit Code​

  1. Open your email client and locate the message containing your verification code.
  2. Note the 6-digit verification code.
  3. Return to your browser and enter the code into the 6-Digit Security Code input field.
  4. Click Verify & Sign In (or press Enter).
  5. Upon successful verification, you are immediately routed to the Team Inbox (/dashboard/teamInbox) or your last active workspace page.

3. Automatic Session Resumption & Signing Out​

To maximize agent productivity, Wabixo maintains a secure authenticated session on your device:

  • Returning Users: If your browser session is still active and valid, opening the login URL will automatically bypass the login prompts and display: 
    Redirecting to Dashboard...
  • Signing Out: To explicitly terminate your session, click your user avatar in the top-right utility area of the header and select Sign Out. This securely clears your authentication token, terminates the local session, and returns you to the login screen.

4. OTP Rate Limiting & Cooldown Protection​

To prevent brute-force attacks, unauthorized credential guessing, and email inbox flooding, Wabixo enforces strict automated rate limiting:

How Rate Limiting is Triggered:​

  • Rapid Code Requests: Requesting new verification codes repeatedly in short succession without waiting.
  • Multiple Failed Attempts: Submitting incorrect or expired 6-digit OTPs consecutively.

What Happens When Rate Limited:​

  1. Security Lockout Window: The system initiates a temporary security lockout of up to 15 minutes (900 seconds) (or the duration indicated by the server's Retry-After header).
  2. Live Countdown Banner: An amber alert banner with a pulsing clock icon appears prominently on the login screen: 
    [ Clock ] Rate limit active                  14m 52s
    Please wait for the timer before requesting another code.
  3. Action Lockout: The input fields and submission buttons are temporarily disabled. The countdown timer ticks down in real time every second.
  4. Automatic Unlock: As soon as the countdown timer reaches 00:00, the rate limit clears automatically, allowing you to request a fresh verification code.

5. Troubleshooting & FAQs​

Problem: The screen shows "Rate limit active" with a countdown timer​

  • Why it happens: Multiple verification codes were requested or entered incorrectly within a short window, activating security rate limiting.
  • How to fix it: Wait for the live countdown timer to reach 00:00. Do not refresh the page repeatedly. Once the timer finishes, enter your email carefully and request a fresh code.

Problem: I did not receive my 6-digit verification code​

  • Why it happens: The code may be delayed by corporate email filters, routed to spam, or the email address was entered with a typo.
  • How to fix it:
    1. Check your Spam, Junk, and Promotions folders.
    2. Confirm with your administrator that your email address was registered under your organization's tenant workspace.
    3. Ensure your IT or email administrator whitelists verification emails from app.wabixo.com.

Problem: Error message says "The verification code is invalid or has expired"​

  • Why it happens: OTPs expire after 10 minutes. Entering an old code or mistyping a digit will trigger this error.
  • How to fix it: Click Change email on the login screen to request a fresh code and enter the latest one received.