Providers and credentials
Each store uses its own provider account. Switching provider keeps the other provider's saved details, so you can switch back.
MSG91 (recommended for India)
| Field | Where to find it |
|---|---|
| Auth key | MSG91 panel → API → Auth key. |
| Sender ID | Your DLT-registered 6-letter header. Leave empty to use the sender set on each MSG91 template. |
| Webhook shared secret | Make up any long random password. |
In MSG91, set the delivery report URL to the Delivery status webhook link with ?token= and your shared secret added to the end.
Every SMS template you use needs its DLT template ID (see Templates).
Twilio
| Field | Notes |
|---|---|
| Account SID | Starts with AC. On your Twilio Console dashboard. |
| Auth token | Secret. |
| From number | Your Twilio number with country code, or a sender name. Not needed if you use a Messaging Service SID. |
| Messaging Service SID | Starts with MG. Used instead of the From number. |
| Status callback URL | Paste the Delivery status webhook link here. |
Vonage
| Field | Notes |
|---|---|
| API key and API secret | Vonage dashboard → API settings. |
| From number | Your Vonage number, or a sender name where allowed. |
| Status callback URL | Optional. Empty uses the URL set in the Vonage dashboard. |
| Signature secret and Signature method | Must match the Vonage dashboard (default SHA-256 HMAC). |
Backup providers for one-time codes
Under Backup providers (one-time codes) on the SMS channel page, you can add a second SMS provider account. If an OTP fails on your main provider, it is retried through the backup so shoppers can still sign in or check out. Set the backup order on the OTP Verification page.
Delivery reports
Delivery reports are only accepted when they are signed by the provider or carry your shared secret. Without them, messages show Sent but never Delivered.