Token of Trust Identity Verification


Verify people with ease whether they are creating new accounts or transacting on your website. Whether you need to verify age, prevent fraud, or meet KYC and AML compliance guidelines, you can quickly and easily add identity verification by Token of Trust to ensure your website is accepting orders and new users who have been fully vetted and verified. For full details see Token of Trust’s WordPress Integration Options and Scenarios.

This plugin connects your WordPress site with Token of Trust’s robust identity verification platform. To use this plugin with live users, you will need an active subscription with Token of Trust but you can get started today in test-mode by getting a license key from Token of Trust. When you’re ready to go live, a Token of Trust verification expert will help you find the best configuration to fit your needs.


  • Verify users without them needing to leave your site.
  • Supports a wide range of verifications – age verification, SMS/phone Verification, KYC, AML, Email Verification, Proof of Address, Electronic ID verification, Government Issued ID Capture and Verification, and Selfie Capture.
  • Supports WooCommerce, Ultimate Member and BuddyPress.
  • Token of Trust remembers repeat customers and users.
  • Verification Gates to require verification for specific pages.
  • GDPR and CCPA compliant.
  • Knowledgeable team can assist with ATF guidelines for Alcohol, Firearms, Ammunition, Tobacco, and Vaping ecommerce businesses.
  • Supports multilingual and internationalization.


  • Mobile responsive design.
  • Integrated workflows.
  • Active development team providing frequent updates and new features.
  • Customizable workflows to fit your evolving verification and compliance needs.
  • Auditing support.
  • Reputation Reports to give your team actionable details about what users have been able to prove and what to be careful about.
  • Manually approve/override users when you need to with our Approve Users feature.
  • Automation for Order Approvals.


  1. Verification without leaving your website.
  2. Token of Trust verifies the user and handles sensitive identity information in compliance with international law.
  3. Users can be automatically or manually approved.
  4. A verification summary for each user can be accessed from the WordPress admin dashboard or from Token of Trust’s web portal dashboard.


Token of Trust can be configured with WooCommerce to verify customers in the checkout process in any of 3 ways:

  1. All products
  2. Specific products within certain categories or tags
  3. Specific shipping methods (e.g. don’t verify local pickups)

This allows you to apply age verification, anti-fraud and compliance measures only where you really need them.


The Token of Trust plugin for WordPress works best alongside member management plugins that establish user profiles and account settings pages within WordPress. The member management plugins we currently support without advanced configurations are:

  • BuddyPress
  • Ultimate Member
  • Shortcodes are available for advanced WordPress integrations.


See Token of Trust’s WordPress Integration options and scenarios for details on all the ways you can use Token of Trust with WordPress.


Token of Trust has been translated into the following languages:

  • English (US)
  • Spanish
  • French


We’re on a mission to help people make safe and smart decisions online. If you have an idea for how we can improve our plugin or platform, Send us a Message.


  • The 'account connector' is an embeddable component that invokes the Token of Trust verification workflow. The 'reputation summary' is an embeddable component that represents the current state of verification for a given user.
  • The Token of Trust Identity Verification Plugin for WordPress works with WordPress core and also has deeper integrations with select WordPress Member Management Plugins.
  • The Token of Trust settings page is where website admins can enter their License Key and check the integration status with the Token of Trust Platform.


From your WordPress dashboard

  1. Visit Plugins > Add New
  2. Search for Token of Trust
  3. Activate the Token of Trust plugin from your Plugins page.
  4. Navigate to the new Token of Trust settings page in the WordPress admin menu
  5. Complete the fields for production domain and your API keys.

From or GitHub

  1. Upload the Token of Trust plugin folder to:
  2. Activate the Token of Trust plugin from your Plugins page.
  3. Navigate to the new Token of Trust settings page in the WordPress admin menu
  4. Complete the fields for production domain and your API keys.

Once complete, the WordPress dashboard will contain an Account Connector widget. Any BuddyPress or Ultimate Member profiles will contain a Verifications tab and new shortcodes will be available.

For additional help and documentation for integrating Token of Trust components on WordPress sites, please visit the WordPress Plugin Docs on our website.

Widget Shortcodes

You can use the shortcodes below to render tot widgets where you want them. Short codes will default to the currently logged-in user.

Account Connector

Allows the logged in user to connect their account to token of trust. After connecting this shows their reputation (much like the Reputation Summary below) and allows navigation to Token of Trust to improve their reputation and configure their user.

Please Note: For security reasons this widget should only be shown on password protected pages for the intended user!

[tot-wp-embed tot-widget="accountConnector"][/tot-wp-embed]

To show the account connector using to the person API.

[tot-wp-embed tot-widget="accountConnector" verification-model="person"][/tot-wp-embed]

Reputation Summary

Displays a summary view of the user’s reputation.

[tot-wp-embed tot-widget="reputationSummary"][/tot-wp-embed]

Profile Photo

Displays a given user’s selected token of trust photo.

[tot-wp-embed tot-widget="profilePhoto"][/tot-wp-embed]

Verified Indicator

Displays a small indication of how far the user has gone through token of trust verification process.

[tot-wp-embed tot-widget="verifiedIndicator"][/tot-wp-embed]

To show this indication when members are not verified, use with this additional attribute.

[tot-wp-embed tot-widget="verifiedIndicator" tot-show-when-not-verified="true"][/tot-wp-embed]

Additional Settings

You can override any short code user by passing additional attributes as follows:

[tot-wp-embed wp-userid="EXAMPLE" tot-widget="reputationSummary"][/tot-wp-embed]

Render in templates/PHP

The easiest way to render widgets from templates is to use shortcodes just like in the WordPress admin interface


echo do_shortcode('[tot-wp-embed tot-widget="reputationSummary"][/tot-wp-embed]');


Is Token of Trust compliant with the EU’s General Data Protection Regulation (GDPR)?

Yes, Token of Trust maintains compliance with GDPR as a “Data Processor”. You may request Token of Trust’s Data Processing Addendum (DPA) by emailing

Do I have to create a Token of Trust account before using this plugin?

Yes. This plugin connects your Token of Trust account to your WordPress site using a license key and requires that you create a Token of Trust account to get started. A credit card is not required to try it out. All Token of Trust accounts start in test-mode, allowing free testing without affecting your live data. You can switch from test-mode to live-mode whenever you’re ready for launch.

Does Token of Trust support age verification?

Yes. Token of Trust is capable of confirming a person’s identity, determining their age, and checking if they meet a specific age criteria (e.g. 21+). Token of Trust can support websites with minimum age requirements. This may apply to e-commerce merchants selling age-restricted products, such as alcohol, tobacco, vape and firearms.

Does Token of Trust verify government-issued photo IDs like a Passport?

Yes. Official government IDs like a Passport or National ID Card can be captured and analyzed within Token of Trust’s verification workflow.

Can I choose where verification displays for an advanced or custom application?

Yes. We do support advanced shortcodes, javascript embeds and manual PHP rendering tools. See our website for more details on Token of Trust’s WordPress Integration options and scenarios.

What integrations do you support for building communities, marketplaces and other types of member management?

  • BuddyPress
  • Ultimate Member

What factors contribute to a member’s identity verification?

Token of Trust verification looks at a variety of attributes across multiple social networks and real world IDs like driver’s licenses. Some attributes include:

  • Account age
  • Activity location, geo tags and meta other metadata
  • Age verification
  • Name verification
  • Social fraud network scans
  • Government fraud lists
  • ID property consistency and security features
  • Electronic ID Verification (eIDV)

Can I run Token of Trust from localhost?

Yes we currently support running from any of the following localhost ports with our test keys: 80, 443, 3000, 3001, 3443, 7888, 8000, 8080, 8888, 32080, 32443, or 33080.

The Token of Trust plugin automatically detects when you’re running on localhost so no configuration change is required – your Live Site always remains your production site.


❄️1️⃣2️⃣ 2, 2021
We installed the plugin, we had questions and went to their website, then they asked for information before answering, where they refused to offer any information before taking more details about our platforms, claiming that is a trust-building issue argument which we do not buy. That was enough for us to uninstall and move to the next plugin. This is our experience, so good luck with others to share more information with you.
☀️ 6️⃣ 3, 2021
This was the perfect solution for age restricted e-commerce. Super quick age and ID verification. The support and implementation team are great to work with as well!
🌸5️⃣ 14, 2020 1 reply
I installed it and clicked on the General Settings link, then clicked on the Start Configuring button, and all I get is a "Sorry, you are not allowed to access this page."
🍂 1️⃣1️⃣ 13, 2018
After a lot of research, I found that when themes and plugins build a “verified user” feature, the solution is never quite right — Token of Trust is the exception. After trying Ultimate Member’s Verified User Extension and RentalsClub for the WP Rentals theme, I realized how cumbersome verification processes could be for both admins and users of a site. While all the options I explored had a nice visual interface for communicating the verified status of my users, they didn’t handle the verification process for evaluating new user accounts in a smooth, automated, and safe way. Some of the approaches I found even enabled users to upload their identification documents to WordPress, but I never felt comfortable storing sensitive personal data on our WordPress site — it introduced more liability than I wanted to deal with. And even if we had access to those identity documents, I thought “how will I ever have the time to accurately review the authenticity of every document?” I realized that this wasn’t an easy problem to solve and that it was going to require a lot of custom development to build the right solution. Fortunately, I learned about Token of Trust’s platform for handling all of the concerns I had been running into. Their platform does both the deep automated analysis of user identities while also offering visual interface for communicating the verification status of every user. Best of all, they have a WP Plugin that saved our developers months of integration effort. We’ve been using the Token of Trust platform and their plugin for over a year on our vacation rental booking website and I’ve been impressed with the constant flow of improvements. I thought it was great to begin with and it just keeps getting better!
🌸5️⃣ 14, 2018
The team at Token of Trust taught us a lot about best practices for KYC/AML and privacy concerns for global consumers. Before working with Token of Trust, I hadn't given much thought to the liability and risks we would have faced if we had tried to build this ourselves, or even use another plugin that does everything just within WordPress. These guys are hardcore about protecting end user privacy and make sure that their customers don't have to worry about taking on unnecessary risks. I would use Token of Trust again and again for any site or application needing identity verification, fraud prevention, or KYC/AML.
🌸5️⃣ 14, 2018
Token of Trust came to the rescue when we needed a global KYC/AML solution that provided multilingual support without a ton of our own development. Most of the other options we explored were point solutions that only handled one small part of our overall KYC/AML needs. I felt like we really lucked out when our developer discovered the Token of Trust plugin WordPress because it delivered online checks and government id checks globally, with all of the verification workflow elements being internationalized (which was really important because most of our audience speaks French).
Read all 11 reviews

Contributors & Developers

“Token of Trust Identity Verification” is open source software. The following people have contributed to this plugin.




Tax collection fixes:

  • Fixed to ensure wholesale transactions are always tagged as such.
  • Fix to ensure traceIds don’t change through the transaction.


Tax collection fixes:

  • Fixed an issue where disabling verifications also disabled checkout tax collection.
  • Added tax collection amounts to orders in a separate field.
  • Fixed an issue where post-order ‘audit’ always failed California since it was looking for the wrong label.
  • Fixed an issue where _tot_ordertype was not set to wholesale when a wholesaler was signed in.


  • Reverted to 1.6.25 – we’re seeing an issue where excise tax collection is turned off for some customers


  • Added advanced setting for those using excise tax feature.


  • Use the labels returned from the Core Product so that we can conform to CECET and other tax labelling requirements.
  • Send the transactional sales price to the backend for tax calculations.
  • Fix to wholesaler, retailer role matching.


  • Fixed source_url included in links out to that broke auto-connection.
  • Fixed links out to sandbox that caused bad license registrations.
  • Fixed a caching issue at checkout.


  • Added a number of advanced options to support wholesale vs retail for excise tax calculations.
  • Added ability to order on behalf of a customer on the admin page and include excise taxes.


  • Display warning to admin if attempt is made to use the API key on an invalid domain.
  • Revamp to passing transactionId and traceId along with Woo Commerce transactions to facilitate better logic to troubleshoot orders.
  • Fix to a problem where the tot-status was incorrectly attributed to the latest post – which was often but not always correct.


  • Fixes anchor to get started.


  • Ensure traceId is stable from cart through fulfillment.
  • Fix an issue where ‘Connecting’ from TOT didn’t appear to work in some cases and didn’t provide adequate feedback.


  • Reverted to 1.6.17 from 1.6.18 which will come again in 1.6.20


  • Made getting started more clear for new installs: how to proceed (Get Started) by hiding unnecessary detail and providing admin level visibility when TOT is not setup.
  • Fixed an issue where TOT api was called in a loop – we now cache on the client side.
  • Bust cache on plugin browser side includes.


  • Support for improved onboarding experience from Token of Trust – HQ screen.
  • Improved uniqueness of trace-id on shopping carts.


  • Moved more logging toward new debug logging mechanism and increased timeout to 45 minutes.
  • Added an advanced option to allow optional debounce of the payment button in case people are mashing it multiple times and the payment plugin isn’t properly handling it. WARNING: this option may cause problems with payment providers that depend up simulated button clicks.


  • Tested through 6.0.0 and fixed a couple minor warnings.


  • Fix an issue where givenName and familyName were not getting set correctly and could come to TOT as ‘0’ or ‘1’.


  • Fix an issue where order of products in cart could cause verification to not trigger on mixed goods cart.


  • Fixes post-checkout verification.


  • Minor fix – make traceId unique to allow better issue tracking.


  • Adds support to specify pages to include or exclude from verification by multi-select.
  • Also added support to exempt accounts from verification based upon roles – allowing admins, etc to get to protected pages without verification.


  • Links to TOT include conversion_source=wordpress to give better context to WordPress and WooCommerce users when signing up.
  • Ability to exempt orders based upon roles (admin, etc) – allowing trusted agents to place orders without verification.


  • Updated the stable tag related to the plugin release.


  • The Token of Trust plugin will now keep your users’ verifications even if they switch email addresses in your system.


  • Excise Taxes will not calculate on bundles of other items, but rather the items themselves in the bundle.


  • Better excise error handling


  • Improved API Connection testing to provide better feedback in the Admin dashboard.


  • Better reporting on ToT’s performance within WooCommmerce.


  • Added the ability for Token of Trust users to add excise taxes to the shopping card process. Contact our success team for more info.


  • Addressed an issue where the plugin could incorrectly send a WordPress username as an alias, causing confusion with the verification engine.
  • Fixed a bug with verification categories in the shopping cart.


  • Fixed some bugs with the Reputation Status shortcode.


  • Removed unnecessary verification screens from the admin dashboard and post-checkout pages.


  • Added the option to add a simple Age Gate to your website. Check settings for more info.


  • Added a new setting to clone the checkout button. This improves Verification integration.


  • A new field (tot_status) will automatically be applied. This is visible in the Order Details screen.


  • Verified Token of Trust integrity in WordPress 5.8.0
  • Improved UI of Settings Screen


  • New plugin installs default to NOT use custom states (could cause issues in certain environments).
  • Improved upgrade scripts for fresh installs.


  • Use core product gates rather than reasons for verification gates.


  • User status fixed on admin.
  • Fix an error with double https:// when loading embed.js.


  • Allow for a longer timeout and allow error to pass to client.


  • Initial support for SMS authentication.
  • Fix for logical error that caused verification gates to not appear.
  • Use core product gates rather than reasons forgovtIdPositiveReview verification gates.


  • Change to use billing for verification (by default) rather than shipping.


  • Minor link update.


  • Copy updates only.


  • Don’t load on home page unless it’s critical to do so.
  • Fixed an issue where webhook related actions weren’t clearing some orders (as visible in order details).


  • Fixed an issue where the verifiedIndicator could (erroneously) pull the current user when in admin mode.


  • Fixed an issue where verifications were being run in off categories.


  • Don’t display “Not Required” for pre-approved orders.


  • Fixed an issue where orders dashboard was showing Not Required for verified orders.


  • Fixed some WP lifecycle dependencies that made the plugin difficult to test.
  • Initial Support for “Not Required” and “TOT Not Activated”


  • Moved verifyPerson endpoint to more universal wp_ajax_ based solution to try to ensure we don’t run into route blocks and have less custom coding.


  • Support for categories, tags, min order amount and other options for verification before payment.
  • Take Woo Commerce out of Beta.
  • Change some default values (affects new users only).


  • Support for verification before payment.


  • Force inclusion of jquery when tot is used.


  • Now when Debug is activated we add inline debug comments into rendered pages.
  • Now you can restrict TOT from running on checkout depending upon the shipping method.


  • Improved admin verified indicator to show same states and vendor portal.


  • Added Verification Status on Woo Commerce Orders page.
  • Bug fixes related to Woo Commerce Status.
  • Woo Commerce Status now off by default.

Earlier Versions

For the earlier versions, please see the separate changelog.txt file.