Open WhatsApp > Linked Devices > Link a Device to scan
Include country code without plus sign (e.g., 254712345678)
Your 8-Digit Pairing Code
Expires: 30s
----
Enter code in WhatsApp > Linked Devices > Link with Phone Number
Session Linked Successfully
Your session ID was also dispatched directly to your WhatsApp inbox.
5 nodes
Select an active node to initialize session generator. Nodes auto-monitor every 5 minutes.
Documentation & Legal Policies
SILA-MD Authenticator · Official Compliance & Deployer Guide
LEGAL NOTICE & BINDING ACKNOWLEDGEMENT
These Terms of Service constitute a legally binding agreement between you ("User", "Deployer") and the maintainers of SILA-MD Authenticator and Vinnie Digital Hub. Read this document thoroughly before initiating pairing or deploying any third-party automation software.
1. Acceptance of Terms & Scope of Service
By browsing, accessing, requesting a QR code, obtaining a pairing code, or retrieving a Session ID from this portal, you irrevocably agree to comply with and be bound by these Terms of Service, along with our Privacy Policy. If you do not consent to all conditions specified herein, you must immediately terminate access and refrain from utilizing any generated credentials.
SILA-MD Authenticator functions solely as an ephemeral browser-based interface to facilitate cryptographic multi-device handshakes utilizing the open-source Baileys protocol. The platform does not host, control, or execute autonomous messaging bots on your behalf.
2. Disassociation from WhatsApp Inc. & Meta Platforms Inc.
SILA-MD Authenticator, Vinnie Digital Hub, and all associated software repositories are entirely independent open-source projects. This application is NOT affiliated, associated, authorized, endorsed by, or in any way officially connected with WhatsApp Inc., Meta Platforms Inc., or any of their subsidiaries or corporate affiliates.
The names "WhatsApp", "WhatsApp Web", "WhatsApp Multi-Device", as well as related names, marks, emblems, and images are registered trademarks of their respective owners. The use in this website of any trade name, trademark, or service mark is for identification and educational reference only and does not imply any affiliation or endorsement.
3. Permitted Purpose, User Eligibility & SIM Ownership
You expressly warrant that:
You are at least 18 years of age or possess the legal capacity to enter into binding agreements in your jurisdiction.
You are the exclusive, lawful subscriber, registered owner, and account holder of the SIM card and phone number inputted into this pairing service.
You will strictly NOT attempt to pair, monitor, link, intercept, or generate sessions for phone numbers, accounts, or devices belonging to any third party without their explicit, informed, and written consent.
The generation of Session IDs for malicious or abusive purposes is strictly prohibited. You agree that you will not use, program, or deploy any bot powered by this service to:
Harass, stalk, threaten, impersonate, defame, or infringe upon the privacy rights of any individual or community.
Scrape, harvest, extract, or compile phone numbers, profile images, or personal metadata from WhatsApp groups or contact lists without authorization.
Transmit viruses, worms, malware, spyware, Trojan horses, or any code designed to disrupt, compromise, or destroy telecommunication hardware or software.
Engage in illegal gambling, illicit commerce, distribution of non-consensual imagery, or violations of domestic telecommunications regulations.
5. Assumption of Risk: WhatsApp Account Suspension & Permanent Ban Warning
EXPLICIT BAN WARNING: Automated userbots violate WhatsApp's personal Terms of Service. WhatsApp employs sophisticated machine learning systems that analyze messaging frequency, rapid broadcast patterns, and contact block rates. Deploying automated scripts entails an inherent risk that your phone number may be permanently banned by WhatsApp with no right of appeal.
You acknowledge and accept all risks associated with third-party automation. Under no circumstances will SILA-MD, Vinnie Digital Hub, or any project contributor be responsible for:
Temporary (e.g. 24h, 48h, 7-day) or permanent account suspensions issued by WhatsApp LLC.
Loss of personal or business chat histories, media archives, or client conversations.
Business interruption, loss of profits, commercial damages, or regulatory penalties resulting from account termination.
6. Session Token Custody & Absolute Revocation Rights
A Session ID is a cryptographic master key providing full headless client access to your WhatsApp account. You bear sole responsibility for safeguarding this credential. Do not commit Session IDs to public GitHub repositories or share them with unauthorized persons.
Revocation Guarantee: Because this service operates strictly within WhatsApp's official Multi-Device framework, you can immediately invalidate any session at any moment directly from your smartphone by navigating to WhatsApp > Linked Devices > Select SILA-MD Session > Log out. This permanently severs all socket connections worldwide.
7. Limitation of Liability & "AS-IS" Warranty Disclaimer
THIS SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, UPTIME, ACCURACY, OR NON-INFRINGEMENT. TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT SHALL THE OPERATORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR EXEMPLARY DAMAGES ARISING FROM YOUR USE OR INABILITY TO USE THE SERVICE.
8. Governing Law & Inquiries
These terms shall be governed by and construed in accordance with applicable telecommunications and digital commerce laws. For inquiries, technical clarifications, or compliance matters, contact developer support via WhatsApp at +254 768 666 068 or via our website at vinniedigitalhub.co.ke.
ZERO-STORAGE & PRIVACY ARCHITECTURE
SILA-MD Authenticator is built upon strict zero-knowledge principles. We do not store, catalog, inspect, or monetize your private chats, contacts, or media.
1. Information We Ephemerally Process
To establish a multi-device connection, the following data points are handled in volatile random-access memory (RAM) only during the active handshake:
Target Phone Number (Pairing Code Mode): When provided, the number is transmitted to the selected backend WebSocket node to request an 8-character verification string from WhatsApp's authorization servers. The number is never recorded to any database or persistent log.
Cryptographic Multi-Device Credentials (creds.json): When you approve the QR code scan or enter the 8-digit pairing code on your smartphone, WhatsApp delivers cryptographic device identity keys. The backend compiles these keys into an encrypted Base64 string (the Session ID), relays it directly to your browser, sends a backup copy to your own WhatsApp chat, and promptly purges the credentials from memory.
Network Handshake Headers: IP addresses and HTTP user-agent headers are processed transiently by edge cloud routing providers (Fly.io, Railway, Render, Heroku) strictly for TLS negotiation and DDoS mitigation.
2. Data We Strictly DO NOT Collect or Store
Our infrastructure operates without a persistent database. We explicitly DO NOT collect, inspect, or retain:
✕ Chat Messages & Media
No text chats, voice notes, audio files, photos, videos, or documents are ever read, recorded, or archived.
✕ Address Book & Contacts
No contact numbers, contact names, broadcast lists, or group rosters are extracted or saved.
✕ Call Logs & Locations
No voice/video call telemetry, GPS coordinates, or location pins are monitored or accessed.
✕ Payment Credentials
No financial data, credit card details, or banking identities are ever processed.
3. End-to-End Encryption & Signal Protocol Integrity
WhatsApp utilizes the Signal Protocol featuring end-to-end encryption with Curve25519, AES-256, and HMAC-SHA256. When your phone pairs with a multi-device node, communications between your device and WhatsApp servers remain cryptographically shielded. SILA-MD does not hold private master keys capable of decrypting ongoing peer-to-peer conversations.
4. Cookie Policy & Client-Side Storage
This web application utilizes ZERO advertising cookies, tracking pixels, or third-party behavioral analytics. We utilize HTML5 localStorage strictly on your local browser for:
sila_theme: Storing your aesthetic choice (system, light, or dark).
You can clear this storage at any time via your browser settings with zero impact on functionality.
5. Automated Lifecycle & Immediate Erasure
All transient WebSocket state objects are subject to automated garbage collection. If a QR code is generated but not scanned within 30 seconds, or if a pairing handshake fails or times out, the active Baileys socket instance is destroyed and wiped from RAM immediately.
6. International Privacy & Data Protection Alignment
Our zero-storage approach conforms with the fundamental principles of the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and the Kenya Data Protection Act, 2019, specifically adhering to the doctrines of Data Minimization, Purpose Limitation, and Storage Limitation.
7. Privacy Officer Contact
If you have questions regarding data flow or cryptographic handshakes, reach out directly via WhatsApp at +254 768 666 068 or visit vinniedigitalhub.co.ke.
DEPLOYER BLUEPRINT: BOT RISKS, PROS, CONS & BEST PRACTICES
Everything you need to know before linking, hosting, and deploying a third-party WhatsApp bot. Read carefully to safeguard your account.
01.What exactly is SILA-MD & how does multi-device pairing work?
SILA-MD is an automated multi-device session creator built on the open-source Baileys library. Instead of requiring a physical browser like Chrome running Selenium or Puppeteer, SILA-MD initiates a lightweight, headless cryptographic WebSocket connection directly to WhatsApp's multi-device servers. When you scan the QR code or enter the 8-digit pairing code on your phone, WhatsApp issues a set of authorization tokens (creds.json). SILA-MD bundles these credentials into a compact string called a Session ID, allowing you to run your WhatsApp bot on cloud servers without scanning a QR code ever again.
02.What are the pros and advantages of deploying a WhatsApp userbot?
WhatsApp bots provide powerful automation features not available in standard apps:
✓ 24/7 Uninterrupted Operation
Runs continuously on cloud servers (Heroku, Railway, VPS) even if your mobile phone is powered off, out of battery, or disconnected from the internet.
✓ Automated Group Moderation
Auto-kick spammers, detect anti-link sharing, welcome incoming members, warn troublemakers, and enforce group safety rules automatically.
✓ Rich Media & Sticker Tooling
Convert photos and video clips into animated WhatsApp stickers on the fly, trim audio, download media, and search Google/Wikipedia.
✓ AI-Powered Chat Integration
Hook your WhatsApp account up to modern AI APIs (Gemini, ChatGPT, Claude) to act as an automated personal secretary or customer responder.
03.What are the serious risks, pitfalls, and cons of third-party bots?
Every deployer must understand the real operational hazards:
1. WhatsApp Machine Learning Ban Heuristics:
WhatsApp actively detects non-standard WebSocket communication and humanly impossible messaging speeds. If your bot sends 20 messages in 3 seconds or blasts strangers, WhatsApp's automated defense engine will immediately ban your phone number.
2. Security Vulnerabilities & Untrusted Plugins:
Many open-source bot frameworks permit loading community plugins. If you install unverified command scripts, malicious actors could inject code that broadcasts your contacts, dumps media, or hijacks your session.
3. Free Cloud Dyno Sleep & Resource Throttling:
Free hosting platforms (like Render, Koyeb, or free Railway hours) automatically sleep containers after inactivity. When the container sleeps, your bot goes offline until pinged, and disk state is wiped on container reboot.
04.The Deployer Anti-Ban Blueprint: How do I protect my phone number?
Follow these mandatory guidelines established by senior bot developers:
RULE 1 — NEVER use your primary personal or commercial WhatsApp number: Always purchase a cheap secondary SIM card strictly dedicated to bot hosting. That way, if a ban occurs, your personal conversations remain unaffected.
RULE 2 — Warm up fresh SIM cards: Never link a bot to a SIM card registered less than 20–30 days ago. WhatsApp monitors new accounts with extreme scrutiny. Have a few regular human chats on the number first.
RULE 3 — Never send unsolicited broadcast spam: Do not send automated messages to phone numbers that do not have you saved in their contact book. If multiple users tap "Report and Block", WhatsApp automatically triggers a ban.
RULE 4 — Implement message delays: Configure your bot command handlers with simulated typing delays (presence: 'composing') and sleep pauses (at least 1500ms between responses).
RULE 5 — Restrict public commands: Configure your bot in WORKTYPE: 'public' or 'private' so only group members or authorized admins can trigger heavy commands.
05.How do I deploy SILA-MD once I copy my Session ID?
Deploying takes less than 2 minutes using our official integrations:
Alternatively, visit our official GitHub repository at github.com/ilovekego/sila-md and fork the code to your personal account.
Select your deployment target (Heroku, Railway, Render, Fly.io, or VPS).
In the environment variables configuration, create a variable named SESSION_ID and paste the exact string copied from this authenticator.
Deploy! The bot will boot, connect to WhatsApp, and send a confirmation message to your linked phone.
06.Why does the QR code & pairing code refresh every 30 seconds?
WhatsApp's Multi-Device architecture utilizes rotating Noise protocol cryptographic handshakes. The public keys embedded inside the QR code matrix or pairing challenge are valid for exactly 20 to 30 seconds. If not accepted within that timeframe, WhatsApp's auth servers reject the handshake to prevent replay attacks. Our authenticator features an automated countdown timer that synchronizes with the server to request fresh codes automatically.
07.How do I revoke or kill a session if I suspect unauthorized access?
You possess full master control on your smartphone at all times. Open WhatsApp > Linked Devices, find the device named SILA-MD or Google Chrome (Linux), tap it, and press Log Out. This action sends a cryptographic revocation packet to WhatsApp servers that permanently destroys the paired key. The bot will instantly disconnect with Error 401 (Logged Out).
08.How do I get official support or assistance?
Our team is available to assist you with session linking, deployment configuration, and troubleshooting:
