Skip to main content

​
Accepted formats

Tawked verifies Saudi mobile numbers only. Send to in any of these forms. Tawked stores it, and answers with it, as E.164. Anything else answers 422 invalid_destination. The deprecated field phone is still accepted as an alias for to, and to wins when both are present.

​
Language

lang picks the message language. Only the literal value en selects English. Anything else, including a missing field, means Arabic.

​
What the SMS says

Every SMS comes from Tawked’s sender ID, the same for every customer. You cannot choose or change it. The text names your reviewed application, never a value from the request: In both languages a second line follows, via Tawked, so the full English message reads:
SMS
That is what the review is for: the person receiving the code sees who it is for, and nobody can put your name in a message with a stray key. A message sent with a test key starts with the [TEST] or [تجريبي] stamp (see Testing and the sandbox).

​
Autofill-ready SMS

Phones can read a code straight out of the SMS when the message ends with the right lines. Tawked adds them for you, after the human-readable text and its via Tawked line:
SMS
  • @domain #code, the last line, is what iOS AutoFill and the WebOTP API read. The domain is derived from your application’s reviewed website and is read-only. Switch the line on or off under Verify → Settings, in Autofill (Add the domain line to the message).
  • The app hash line is for Google’s SMS Retriever on Android. Set the 11-character hash in the same place (Android app hash).
  • The optional autofill field on start (web, android or none) picks which lines go out on that one send. Omit it to send every line the application has configured.
  • The sandbox stamp, when present, always comes first, before any autofill line.
The whole message must stay under 140 bytes for Android’s SMS Retriever, and Arabic SMS is billed per 70-character segment. The domain line adds about 25 characters, which can turn one segment into two. The preview on Verify → Settings shows the segment count in each language.
The code field that receives these lines (autocomplete="one-time-code", WebOTP) is shown on Build a sign-in flow. Autofill lines are out of scope for WhatsApp: its message is a fixed Meta template with no room for either.
Last modified on October 18, 2026