Creating a MSG91 Account
Sign up, complete KYC, and find your API key — everything you need before sending your first SMS.
Why First — The Scenario
Imagine you are a CA setting up a new bank account for a client's company. You do not just walk in and start operating — you submit the company documents, wait for KYC verification, and only then does the bank give you access. SMS providers work the same way. MSG91 needs to know who is sending messages on their platform so they can comply with TRAI regulations. This one-time setup unlocks everything.
Step-by-Step Account Setup
Go to MSG91 and Sign Up
Visit msg91.com and click Sign Up in the top right corner.
Fill in:
- Full Name — your name or the account manager's name
- Business Email — use the project email (e.g.
hello@edutrack.in), not a personal Gmail - Mobile Number — a working Indian mobile number (you will receive an OTP here)
- Password — use a strong password and save it in VaultMate immediately
Click Create Account.
Verify Your Email
MSG91 sends a verification email. Open it and click the verification link. Check the spam folder if it does not arrive within 5 minutes.
Once verified, you can log into the dashboard.
Complete KYC
This is the business verification step. Navigate to Account → KYC in the dashboard.
You will need:
Company PAN
The PAN card of the company (not your personal PAN). For EduTrack, use the company's PAN.
GST Number
Your GSTIN. If you do not have one yet, some providers allow registration without it — check MSG91's current policy.
Registered Address
The official company address as registered with the government.
Business Type
Private Limited, LLP, Sole Proprietorship, etc.
Upload the documents when prompted. Common formats accepted: JPG, PNG, PDF. File size limit is usually 2 MB per document.
Wait for KYC Approval
KYC approval takes 1–3 business days. MSG91 sends a confirmation email when approved.
During this period, you can explore the dashboard and set up your DLT registration (covered in the next page) — that runs in parallel and also takes a few days.
Plan Ahead
Start the MSG91 account and DLT registration at least one week before you need SMS to work in production. Both processes have waiting periods. Do not start them the night before launch.
Explore the Dashboard
Once KYC is approved, familiarise yourself with the main sections:
| Section | What It Does |
|---|---|
| Dashboard | Credit balance, today's SMS count, delivery stats |
| SMS | Send SMS, view reports, manage templates |
| OTP | Dedicated OTP flow (simpler than raw SMS API) |
| WhatsApp Business API configuration | |
| DLT | Manage your DLT registration and approved templates |
| Settings → API | Your API keys |
| Billing | Add credits, view usage, download invoices |
Find Your API Key
Go to Settings → API in the left sidebar.
You will see:
- Auth Key — this is your main API key, used in every API call
- The auth key looks like:
123456Ttest6789abcd1234P(alphanumeric string)
Copy this key. Store it in two places immediately:
- VaultMate — under the project name (e.g. "EduTrack"), category "API Key", title "MSG91 Auth Key"
- Supabase secrets — as
MSG91_AUTH_KEYso your edge functions can access it
Never Put This Key in Your Frontend Code
The MSG91 auth key must only ever live in your Supabase edge function secrets or server-side environment. If it leaks into frontend code or a public GitHub repository, anyone can send SMS using your account and credits. Treat it like a bank password.
The Credit System
MSG91 uses a prepaid credit model — you buy credits, each SMS costs a certain number of credits.
Saving Credentials to VaultMate
Every credential created during this setup must be saved to VaultMate. Here is what to save:
| Credential | VaultMate Title | Category |
|---|---|---|
| MSG91 account password | MSG91 Account Password | Other |
| MSG91 Auth Key | MSG91 Auth Key | API Key |
| MSG91 account email | MSG91 Account | Other |
Do this now, before moving to the next step. Credentials saved later are credentials forgotten.
Next Step
Once your account is approved and your API key is saved, move on to DLT Registration — the mandatory legal step that allows your messages to actually reach users' phones.