WhatsApp Cloud API guide for support teams
BYOK setup, templates, 24-hour windows, and the pitfalls people learn the hard way. Written by a team that runs WhatsApp Cloud API daily.
WhatsApp Cloud API in plain English
WhatsApp Cloud API is Meta's hosted programmatic interface for sending and receiving WhatsApp messages from a business application. Unlike the WhatsApp Business app for phones, it's designed for automation, scale, and integration with support, CRM, and routing platforms.
Cloud API runs in Meta's infrastructure (no on-prem). You bring a phone number, complete business verification, generate credentials, and route incoming and outgoing messages through Meta's APIs.
Six steps to a live number
- 1. Create a Meta Business account for your brand.
- 2. Create a WhatsApp Business Account (WABA). Add the phone number you want to use.
- 3. Verify the number and complete business verification. Required for production.
- 4. Generate a system-user access token with messaging permissions.
- 5. Configure the webhook with verification and signature validation.
- 6. Submit templates for approval. Marketing, utility, or authentication categories.
When you can reply freely, and when you can't
Within 24 hours of a customer's last inbound message, you can send any free-form reply. Outside the window, you must use a pre-approved template.
Templates are categorized:
Utility — order updates, reminders, account notifications. Cheaper, lower friction in approval.
Marketing — promotions, campaigns. More expensive, stricter approval.
Authentication — OTP, login codes. Sometimes free or low-cost depending on country.
Plan template usage carefully. Marketing volume can balloon costs; utility templates handle the bulk of legitimate business follow-up.
Mistakes worth avoiding
- Migrating without warning users. Tell customers using the old WhatsApp Business app that the number is moving.
- Skipping business verification. Required for production messaging.
- Sending marketing as utility. Meta polices template misclassification; quality rating drops fast.
- Ignoring quality rating. Low rating throttles your throughput. Monitor it on the Podium.
- No webhook signature verification. Always verify with
X-Hub-Signature-256using the raw body.
Frequently asked questions
WhatsApp Business app vs WhatsApp Cloud API?
WhatsApp Business is a mobile app for small businesses. WhatsApp Cloud API is the meta-hosted programmatic interface used by larger or automation-heavy support teams. A number can only be on one at a time.
Can I use the same number on both?
No. Once a number is migrated to WhatsApp Cloud API, the WhatsApp Business mobile app for that number is deactivated. Plan migration timing.
What is the 24-hour window?
Free-form replies are allowed within 24 hours of the customer's last message. Outside the window, you must use approved templates.
How do template categories affect pricing?
Meta categorizes templates as marketing, utility, or authentication. Pricing varies by category and country. Marketing typically costs more than utility.
Keep exploring
Migrate a number with us.
We'll walk you through Meta business verification, template approval, and webhook setup during the demo. Bring a sandbox number you can move.