Social Accounts

​

What are social accounts?

Social accounts are the connections between Wanhap and your social media profiles or pages. When you connect an account, Wanhap gets permission to create and publish posts on your behalf.

​

Supported platforms

​

Connecting an account

Go to Accounts in the dashboard and click the platform you want to connect. For most platforms, you’ll be redirected to their authorization page. A few have extra steps:

• LinkedIn Page — after authorizing, pick which company page to connect
• Facebook — after authorizing, pick which page to manage
• Instagram (Standalone) — uses Instagram’s own OAuth flow; suitable for personal IG accounts
• Instagram (Facebook Business) — authorize through Facebook, then pick the Instagram account linked to a Facebook page (required for first-party publishing of feed/reels/stories/carousels)
• YouTube — authorize with Google, then pick the channel
• Bluesky — enter your handle and an App Password (not your main password)
• Mastodon — enter your instance URL first, then authorize on that instance
• Telegram — add the Wanhap bot as an admin to your channel or group, then post the /connect command shown in the dialog
• Discord — authorize Wanhap and choose which server to add the bot to (requires Manage Server); the whole server connects as one account and you pick the channel on each post

​

Connection limits (Cloud only)

On Wanhap Cloud, each workspace connects up to 3 accounts per network. To connect more accounts on the same network, add another workspace.

​

Active vs. inactive

Each social account can be toggled between active and inactive:

• Active — The account is included when creating new posts. New posts will have a platform entry for this account.
• Inactive — The account is excluded from new posts. Existing scheduled posts are not affected.

Toggle an account’s active state from the Accounts page or via the API.

​

Connection status

Wanhap runs background checks to keep social connections healthy:

• Every 15 minutes — proactively refreshes OAuth tokens that are about to expire, before the platform forces them out
• Daily — verifies every connected account still authenticates correctly
• Every 30 minutes — sweeps posts left stuck mid-publish and either retries or marks them failed

If any of these detects a disconnected or expired account, the workspace owner receives a notification (in-app and email).

​

Why accounts get disconnected

• Token expiration — Some platforms issue short-lived tokens. Wanhap automatically refreshes them, but if the refresh fails (e.g., the refresh token also expired), the account disconnects.
• Password change — Changing your password on the platform may revoke all OAuth tokens.
• Permission revoked — You manually revoked Wanhap’s access in the platform’s settings.
• Platform policy — The platform may revoke tokens for inactivity or policy changes.

​

Token security

• Access tokens and refresh tokens are encrypted at rest using Laravel’s encryption
• Tokens are never exposed in API responses — the access_token and refresh_token fields are hidden
• Each account stores its token expiry date and Wanhap proactively refreshes tokens before they expire

​

Disconnecting an account

Go to Accounts, find the account, and click Disconnect. This:

• Removes the connection from Wanhap
• Does not affect existing published posts
• Does not revoke Wanhap’s access on the platform (you can do that in the platform’s settings)

​

FAQ