WhatsApp API: How to Get Your API Key in 2 Minutes

Want your website, billing software or Google Sheet to send WhatsApp messages on its own? For that you need one thing first: an API key. This guide shows you how to get it in about two minutes. No coding needed.

What is an API key?

Think of the API key as a password for your apps. When your website asks us to send a WhatsApp message, it shows this key. The key tells us the request is really from you, so we send it from your WhatsApp business number.

• It looks like ept_ followed by 40 letters and numbers.
• You can make up to 20 keys, for example one for your website and one for your Google Sheet.
• You can stop (revoke) any key at any time. Apps using that key stop working at once.

Before you start

• Your WhatsApp number should be connected in the panel (menu Setup). If it is not, the page shows a warning with a link.
• Your plan should include API access. If it does not, the page tells you. Just message our team and we will turn it on.
• Only the account owner or an admin can see the API page.

Step by step: create your first key

1. Log in to your panel at epublictouch.com/app.
2. In the left menu, click WhatsApp API. It has a plug icon.

3. In Step 1 — Your API key, click the big gold button Create my API key. That's it. There is nothing to fill in.

4. Your new key appears in a yellow box. Click Copy key and keep it somewhere safe. Then click Done, hide it.

Find your account ID (which number sends)

Below the keys you will see Step 2 — Your WhatsApp number (account). Every WhatsApp number in your panel has an account ID. If you have only one number, you can ignore it. Messages go from your main number by default.

Control what each key can do

Click Edit next to any key. You can change three things:

• Name: for example "Website form" or "Google Sheet". This helps you know which app uses which key.
• Permissions: Send lets the key send messages. Read lets it check delivery status, replies and templates. A key for a simple form only needs Send.
• Daily limit: No limit, 100, 1,000, 5,000 or 20,000 messages a day. A limit protects you if a script goes wrong or a key leaks.

Keep your key safe

• Never post a link with your key on a website, Facebook, a WhatsApp group or a public Google Sheet.
• Never put the key inside your website's JavaScript. Visitors can see that code. Call the API from your server (PHP, WordPress, Apps Script) instead.
• Use a separate key for each app. If one leaks, revoke only that one.
• If you think a key leaked, click Revoke at once and create a new one.

What next?

Your key is ready. Now send your first message: in Step 3 — Try it, click Open API Tester. It opens in a new tab with your key already filled in. At the top of every page you will see step 1, Your API key, as one short line with the key hidden (like ept_••••1a2B). Part 2 of this guide shows you each click.

Step 3 also has buttons under Open the tester ready for… (Text, Poster with buttons, Photo, Template, Form, Several messages at once and more). Each one opens the tester with your key filled in and that message type already chosen.

Next: Part 2 — Send your first message