YES — for the WhatsApp Flare to work. This is a security feature, not a limitation. Here's why:

• It prevents random people from sending you phishing links
• It ensures the link comes from someone you already trust
• It adds an extra layer of identity verification
• It's the natural way WhatsApp works — only contacts can message you

If you're not WhatsApp contacts: You can add each other (takes 30 seconds), use manual entry mode, scan QR code in person, or share the link via another messaging app.

Requiring WhatsApp contacts creates a trusted channel for the handshake. Here's what it prevents:

• Phishing: Attackers can't send you random HOLOKEY links
• Spam: Your inbox stays clean
• Impersonation: You already know this contact
• Mass targeting: Can't brute-force link sending

It's the same reason WhatsApp doesn't let strangers message you without an invite.

You have several options:

• Add them on WhatsApp: Exchange numbers, add to contacts (takes 30 seconds)
• Manual entry: Share the Secret and Room ID verbally or via another channel, joiner enters manually
• QR code: Meet in person or screen share → joiner scans QR code
• Other messaging apps: Share the link via iMessage, Signal, Telegram, etc.

The Flare is designed for the most common scenario: two people who already communicate via WhatsApp and want a more private channel for their actual conversation.