About this plugin
Didit Verify lets you require identity verification on your WordPress site. Drop a shortcode on any page or require it at WooCommerce checkout.
Secure checkout and content access:
API Session mode is required for checkout and content gating.
The plugin creates a session for the current visitor and confirms its decision with Didit before granting access.
UniLink mode opens a flow for manual review and does not grant checkout or content access.
1 or earlier, users must verify again before protected content is available.
Two integration modes:
- UniLink — paste a URL from the workflow you want from Didit Console. No backend needed.
- API Session — [RECOMMENDED] the plugin creates a unique session per user. Your API key stays server-side.
Display options:
- Modal — opens a centered overlay on top of the page
- Embedded — renders the verification inline where the shortcode is placed
- Configurable close button, exit confirmation dialog, and auto-close on completion
- Debug logging for SDK events in the browser console
Button appearance:
- Fully configurable from the admin panel: text, colors, border radius, padding, font size
- Live preview in Settings that updates as you change values
- Shortcode attributes can override the button text per page
Content gating:
- [didit_gate] shortcode — restrict any content to verified users only
- [didit_status] shortcode — show the user’s verification status anywhere
- Verification status saved to WordPress user meta and visible in the admin Users list
WooCommerce support:
- Require verification at checkout with 4 position options
- Product scope: require verification for all products, only selected products, or all products except selected — with a per-product checkbox in the product editor
- Customizable checkout copy: section title, checkout message, and post-purchase message editable from settings
- Automatically send billing data (name, email, phone, address) to Didit for pre-filling and cross-validation
- Verification session ID saved to order meta for audit
Translations:
- All customer-facing text is translatable (text domain didit-verify, POT file included)
- German translations included: de_DE (informal) and de_DE_formal (formal)
Developer extensibility:
- PHP action hooks: didit_session_created, didit_verification_completed, didit_verification_cancelled
- PHP filter: didit_sdk_url to change the SDK CDN
- DOM CustomEvent: didit:complete for frontend JavaScript
Security (API mode):
- API key stored server-side only — never sent to the browser
- CSRF nonce on every request
- Per-user rate limit: 10 sessions/hour
- Per-IP rate limit: 3 sessions/hour (guests)
- All input whitelisted and sanitized
Third-Party Service
This plugin connects to the Didit identity verification service to process user verifications. When a verification session is created (API mode), the plugin sends data to Didit’s servers. me.
js. The full unminified source code is publicly available at the GitHub repository and npm package linked below.
- Service: https://didit.me
- SDK source code: https://github.com/didit-protocol/sdk-web
- SDK npm package: https://www.npmjs.com/package/@didit-protocol/sdk-web
- SDK license: MIT
- Terms of Use: https://didit.me/en/terms/identity-verification/
- Privacy Policy: https://didit.me/en/terms/privacy-policy/
The SDK can be rebuilt from source with npm install && npm run build (uses Rollup). See the GitHub repository for full build instructions.
No data is sent to Didit until the site administrator configures the plugin and a user initiates verification.