SMS Notifications

Text messages for order updates, one-time codes and offers through your own MSG91, Twilio or Vonage account, with templates, per-event switches, customer consent and a delivery log. MSG91 supports India's DLT rules.

general

Quick start

What it does. Text messages to customers for order updates, one-time codes and promotions, sent to the phone number on their account or guest order. Choose Twilio, MSG91 or Vonage and manage the messages and which events send them.

Who can use it

  • Off until you switch it on.
  • Your plan decides whether you can use it. The module card in Settings → Modules shows Not in your plan (with See plans) or Paid add-on (with Buy add-on) when it is not included. The features list shows which plans include it.

Switch it on

  1. In your admin, open Settings → Modules.
  2. Find SMS Notifications. If it is on the Installed tab, click Enable; if not, open the Browse tab and click Install.
  3. Click Configure, fill in Provider, and save.

Switching it off later stops it working but keeps its data, so switching it back on picks up where you left off.

Where to find it

  • Settings → Messaging

Settings

  • Provider — Which service delivers this channel's messages. Required.
  • Account SID (Twilio) — Twilio: Starts with AC. Shown on the Twilio Console dashboard.
  • Auth token (Twilio) — Twilio: Also verifies the X-Twilio-Signature on delivery callbacks. Stored encrypted; after saving it shows as hidden.
  • From number (Twilio, Vonage) — Twilio: Twilio number in E.164 (+14155550100) or an alphanumeric sender ID. Required unless a Messaging Service SID is set. Vonage: Vonage virtual number in E.164, or an alphanumeric sender ID where the destination country allows it.
  • Messaging Service SID (Twilio) — Twilio: Starts with MG. When set it is used instead of the From number.
  • Status callback URL (Twilio, Vonage) — Twilio: This store's messaging webhook URL for this provider. Sent with every message so delivery receipts come back. Vonage: This store's messaging webhook URL for this provider (max 100 characters). Leave empty to use the delivery-receipt URL set in the Vonage dashboard.
  • Auth key (MSG91) — MSG91: MSG91 panel → API → Auth key. Stored encrypted; after saving it shows as hidden.
  • Sender ID (MSG91) — MSG91: DLT-registered sender header. Leave empty to use the sender set on each MSG91 template.
  • Webhook shared secret (MSG91, Console, Console backup) — MSG91: Any long random string. Delivery reports are accepted only when the webhook URL carries ?token=<this secret> or an X-Webhook-Token header with it. Console: Simulated delivery reports are accepted only with ?token=<this secret> or an X-Webhook-Token header. Console backup: Simulated delivery reports are accepted only with ?token=<this secret> or an X-Webhook-Token header. Stored encrypted; after saving it shows as hidden.
  • API key (Vonage) — Vonage: Vonage dashboard → API settings.
  • API secret (Vonage) Stored encrypted; after saving it shows as hidden.
  • Signature secret (Vonage) — Vonage: Vonage dashboard → API settings → Signature secret. Delivery receipts are accepted only when signed with it. Stored encrypted; after saving it shows as hidden.
  • Signature method (Vonage) — Vonage: Must match the signature method selected in the Vonage dashboard. Default: SHA-256 HMAC.
  • Default country — Two-letter country code (for example IN) applied to phone numbers saved without a country code. Empty uses the store country.
  • Quiet hours start — HH:MM in the store time zone. Marketing messages are held between start and end; order and one-time-code messages are not.
  • Quiet hours end — HH:MM in the store time zone.
  • Messages per second — Upper limit on sends per second for this channel. 0 uses the provider's own limit.

Questions? See the store guide or contact CartWhizz support.

In depth