How to Set Up WhatsApp Cloud API in 2026: Complete Step-by-Step Tutorial

What You'll Need

The official WhatsApp Cloud API from Meta is the only sanctioned way to send and receive WhatsApp messages programmatically in 2026. The On-Premises API is deprecated. Browser emulators and unofficial mods get banned within weeks.

• A personal Facebook account (used to log in).
• A Meta Business Manager account at business.facebook.com (free).
• A phone number not currently on the WhatsApp consumer app.
• Government business documents (GST certificate, business registration, or equivalent) for verification.
• Basic familiarity with curl or Postman if you go raw API. Or skip all of this with a no-code BSP.

Step-by-Step: Set Up WhatsApp Cloud API

Step 1: Create a Meta Business Manager

Go to business.facebook.com and click Create Account. Enter your business name, your full name, and business email. Verify the email confirmation link Meta sends.

Step 2: Add business information

In Business Settings > Business Info, fill in your legal business name (exact match to registration documents), street address, phone, and website. This is required before Meta approves marketing templates.

Step 3: Create a Meta App

Visit developers.facebook.com/apps and click Create App. Choose the Business app type. Give it a name (for example "Acme WhatsApp"). Link it to your Business Manager.

Step 4: Add the WhatsApp product

On your app dashboard, scroll to Add Product and click Set Up under WhatsApp. This provisions a free test phone number (in the format +1 555 XXXX XXXX) and gives you a temporary 24-hour access token.

Step 5: Send your first test message

In WhatsApp > Getting Started, copy the pre-filled curl command. Replace the recipient placeholder with your own phone number (in international format, no spaces — for example 919876543210). Add your phone as a test recipient first. Run the curl in your terminal:

curl -X POST \
  https://graph.facebook.com/v21.0/PHONE_NUMBER_ID/messages \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "messaging_product": "whatsapp",
    "to": "RECIPIENT_PHONE",
    "type": "template",
    "template": {
      "name": "hello_world",
      "language": { "code": "en_US" }
    }
  }'

You should receive the hello_world template on your WhatsApp in 1-3 seconds.

Step 6: Add your real business phone number

In WhatsApp > Phone Numbers, click Add Phone Number. Enter your business number. Choose SMS or voice OTP. Enter the 6-digit verification code. The number is now claimed on Cloud API.

Step 7: Generate a permanent access token

Tokens from the dashboard expire in 24 hours. For production:

1. 1. Go to Business Settings > Users > System Users.
2. 2. Click Add. Name it (e.g. "whatsapp-prod"). Choose role Admin.
3. 3. Click Add Assets. Add your App and WhatsApp Account.
4. 4. Click Generate New Token. Select your app. Choose scopes: whatsapp_business_messaging and whatsapp_business_management.
5. 5. Copy the token immediately — it is shown only once.

Step 8: Subscribe a webhook

Webhooks let you receive incoming messages. Under WhatsApp > Configuration, click Edit next to Callback URL. Enter your HTTPS endpoint and a verify token (any random string you choose). Meta pings your endpoint with a challenge — return the challenge to verify.

Subscribe to messages, message_status, and message_template_status.

Step 9: Submit business verification

In Business Settings > Security Center, click Start Verification. Upload your business registration certificate, GST certificate (India), or equivalent. Meta approves within 2-5 business days. Verification is required for marketing template messages.

Step 10: Submit your first marketing template

Under WhatsApp Manager > Message Templates, click Create Template. Choose category (Marketing, Utility, Authentication). Add header, body with variables, and buttons. Submit. Approval takes 1-24 hours.

Common Issues and Fixes

Verify Your Setup

Five checks before you go live:

• 1. Send a template message via curl → arrives within 3s.
• 2. Reply from the recipient phone → your webhook receives the message payload.
• 3. Check token expiry → must be permanent (no expiry).
• 4. Confirm business verification status is Verified.
• 5. At least one marketing template approved by Meta.

The PostEngage Shortcut: 3 Minutes Instead of 20

If writing curl, managing tokens, hosting webhooks, and submitting templates does not sound fun, PostEngage handles every one of those steps under the hood. You get a no-code dashboard with the same Cloud API underneath, plus free keyword auto-replies forever:

You still own your Cloud API account — PostEngage is a Meta Business Partner integration that operates on your behalf. Migrate away anytime. Read more about our no-code reply automation setup.

FAQ