Get a permanent WhatsApp access token

A regular token from Meta's quick-start expires in 24 hours, which is fine for testing but not for live campaigns. A System User token can be set to never expire — that is the one you want for OttaBlast. Set aside about 15 minutes, and read the sending rules before your first campaign.

1. What you'll need

• A Meta Business account — create one free at business.facebook.com.
• A phone number for WhatsApp that is not already registered on the WhatsApp or WhatsApp Business app (or one you can delete from those apps first). The number must be verified inside Meta before it can send through the Cloud API.
• Admin access to your business so you can open Business Settings.

2. Create a Meta app with WhatsApp

1. Go to developers.facebook.com/apps and click Create app.
2. Choose the Business app type and give the app a name.
3. On the app dashboard, find WhatsApp in the product list and click Set up.
4. When prompted, link the app to your Meta Business account.

3. Connect your WhatsApp number

1. Open WhatsApp → API Setup in the left menu of your app.
2. Add and verify the phone number you want to send from (Meta sends a code by SMS or call).
3. On this same screen, note two IDs you'll need later: the Phone Number ID and the WhatsApp Business Account (WABA) ID.

Keep this tab open — you'll come back for the Phone Number ID at the end.

4. Create a System User

A System User is a non-human account that owns the long-lived token, so it keeps working even if staff leave.

1. Open Business Settings.
2. Go to Users → System users and click Add.
3. Name it (e.g. ottablast-api) and set the role to Admin, then create it.

5. Assign assets & permissions

The System User can only generate a token for assets it has been given.

1. With the System User selected, click Assign assets.
2. Under Apps, select the app you created in step 2 and turn on Full control (Manage app).
3. Click Assign assets again, and under WhatsApp accounts select your WABA with Full control.

6. Generate the permanent token

1. Still on the System User, click Generate new token.
2. Select your app from the dropdown.
3. Set Token expiration to Never.
4. Tick the two permissions: whatsapp_business_messaging and whatsapp_business_management.
5. Click Generate token and copy it now — Meta shows the full token only once.

Store the token somewhere safe (a password manager). Treat it like a password: anyone with it can send messages from your number.

7. Connect it in OttaBlast

1. Log in to your OttaBlast dashboard and open Settings → Integrations → WhatsApp.
2. Paste your permanent access token and your Phone Number ID (from step 3).
3. Save, then use Send test message to confirm the connection works.

Once the test arrives, your WhatsApp number is ready for WhatsApp Blast campaigns.

8. Sending limits & rules

WhatsApp is strict about unsolicited messaging. Meta measures how recipients react to your messages and can lower your limit, pause your number, or permanently disable access if people block, report, or ignore your campaigns. Follow these rules to keep your number healthy. Meta can change exact limits, so always confirm the latest limit inside WhatsApp Manager before a large send.

What the daily WhatsApp limit means

The WhatsApp limit is not simply "how many messages can I send today?" It is the number of unique customers your business portfolio can start conversations with outside the 24-hour customer service window during a moving 24-hour period.

Limit level	What it allows	Plain-English meaning
New portfolio	250 unique customers / 24 hours	Start small while Meta checks business quality.
Scaled	2,000 unique customers / 24 hours	Available after completing Meta's scaling path and keeping quality healthy.
Higher scale	10,000 then 100,000 unique customers / 24 hours	Automatic growth for verified, high-quality senders.
Enterprise scale	Unlimited	Only for accounts that maintain strong quality at very high volume.

If you have multiple WhatsApp numbers in the same Meta business portfolio, they can share the same portfolio limit. One number can consume the available limit for the others, so plan campaign schedules across all connected numbers.

Before sending a campaign

• Use a verified Cloud API number. Add and verify the phone number in Meta, use an approved display name, and complete business verification as soon as Meta requests it. Unverified or poorly named accounts usually cannot scale safely.
• Get explicit WhatsApp opt-in. The customer must clearly agree to receive messages from your business on WhatsApp. Keep proof of consent, including where and when they opted in.
• Use approved templates for first contact. Outside the 24-hour window, you can only send Meta-approved templates. Do not use tricks such as broken spacing, misleading wording, or unrelated categories to bypass template review.
• Respect the 24-hour customer service window. After a customer messages you, you can reply with normal free-form messages for 24 hours. When the window closes, use an approved template until the customer replies again.
• Give an easy opt-out. Use clear wording such as "Reply STOP to opt out" and remove opted-out contacts immediately. Continuing to message someone after they opt out is a high-risk ban signal.
• Warm up new numbers gradually. Do not send to your full limit on day one. Start with your most engaged contacts, watch replies and blocks, then increase volume only while quality remains High or Medium.
• Watch quality and status daily. In WhatsApp Manager, monitor quality rating, messaging limit, template quality, and phone number status. Pause marketing if quality drops to Low or the number becomes Flagged.
• Send useful, expected content. Keep messages aligned with what the person opted in for. Order updates, reminders, support follow-ups, and relevant promotions perform better than generic blasts.
• Avoid risky content patterns. Do not send deceptive offers, adult content, prohibited goods, financial promises, repeated all-caps messages, link-heavy copy, or messages that look copied to a purchased list.

Simple safe-sending checklist

• Confirm the recipient opted in for WhatsApp, not only email or SMS.
• Confirm your template is approved and matches the message purpose.
• Send below your current WhatsApp Manager limit.
• Remove bounced, blocked, unsubscribed, and inactive contacts before every campaign.
• Pause immediately if complaint, block, or failed-message rates increase.

9. Troubleshooting

Still stuck? Contact our team and we'll help you finish the setup.

Related guide: sending email campaigns as well? See how to connect your email via SMTP for your Email Blast sends.