AgeOnce Age Verification for WooCommerce

AgeOnce helps WooCommerce stores protect age-restricted products and content with a secure age verification flow. Use it for alcohol, tobacco, vaping, cannabis, adult content, supplements, events, memberships, or any other WordPress content that should be shown only after age verification.

Instead of relying on a simple “Are you 18?” popup, AgeOnce sends the visitor through a dedicated verification flow and then returns them to your store. The plugin can block WooCommerce checkout until verification is complete, protect selected posts or pages, and record verification details on WooCommerce orders.

You can start with the AgeOnce free plan. No credit card is required for the free tier, so you can install the plugin, connect your site, and test the full WooCommerce or content restriction flow before upgrading.

Why stores use AgeOnce

• Protect checkout for restricted products – Require age verification only when the cart contains products or categories that need it.
• Avoid blanket age gates – Keep normal products and public content open while gating only the items that require verification.
• Support 16+, 18+, and 21+ rules – Configure different minimum ages for different product categories, tags, posts, pages, or custom post types.
• Keep proof on WooCommerce orders – Store the verification status, transaction ID, and timestamp with the order.
• Start free – Use the free AgeOnce plan to test real verification before moving to a paid plan.
• Use one verification flow across your site – The same AgeOnce verification can unlock checkout and protected content.
• Respect privacy – The plugin only contacts AgeOnce when a visitor chooses to verify their age.

Features

• WooCommerce checkout age gate – Disable checkout until the customer completes age verification for restricted cart items.
• Product-level control – Mark individual WooCommerce products as requiring age verification.
• Category and tag rules – Protect products, posts, pages, and custom post types by taxonomy.
• Manual content locking – Add an AgeOnce metabox to lock individual posts or pages regardless of taxonomy.
• Multiple age thresholds – Configure 16+, 18+, and 21+ rules from the same settings screen.
• Order verification metadata – Save verification status, transaction ID, and verification time on WooCommerce orders.
• Secure OAuth flow – Uses state/nonce checks and server-to-server token exchange with AgeOnce.
• Content protection without WooCommerce – Gate posts, pages, and custom post types even if WooCommerce is not active.

Requirements

• WordPress 5.0 or higher
• WooCommerce 5.0 or higher (for checkout protection)
• AgeOnce account with OAuth credentials (Client ID and Client Secret)

Getting Started

1. Install and activate the plugin
2. Create an account at AgeOnce and start with the free plan or choose a paid plan
3. Go to AgeOnce Settings in the admin menu
4. Copy the Redirect URL from WordPress into your AgeOnce dashboard
5. Enter your Client ID and Client Secret in WordPress
6. Click Test connection to confirm the OAuth setup
7. Configure rules for WooCommerce products, categories, tags, posts, pages, or custom post types
8. Save changes and run one checkout or restricted content test

For the WordPress setup guide, see AgeOnce WordPress documentation. For plans, see AgeOnce pricing.

Privacy

This plugin sends data to the AgeOnce service (app.ageonce.com, api.ageonce.com) only when a user explicitly starts age verification, such as clicking “Verify Age” at checkout or on restricted content. No tracking or data collection occurs without that user action.

The plugin does not send WordPress account passwords to AgeOnce. It may store a verification flag in the WooCommerce session or a cookie, and it may store verification metadata on WooCommerce orders. See the AgeOnce service for privacy and terms.

External services

This plugin relies on third-party services operated by AgeOnce (the verification provider). They are required for OAuth login and token exchange so the site can confirm age verification.

• AgeOnce web app (app.ageonce.com) — Used for the user-facing OAuth authorization screen when someone clicks “Verify Age”. The browser is redirected here with your site’s OAuth client ID, redirect URI, a state value, and required minimum age. The user completes verification on AgeOnce; no WordPress account password is sent to AgeOnce.

• AgeOnce API (api.ageonce.com) — Used when the user returns to your site with an authorization code. The plugin sends a server-to-server request to exchange that code for an access token: it transmits the authorization code, redirect URI, OAuth state, and HTTP Basic authentication using your Client ID and Client Secret (stored in WordPress options). On success, the plugin may store a verification flag in the WooCommerce session or a cookie and optional transaction metadata for orders. This happens only during that callback after the user completes the flow.

• Terms and privacy (AgeOnce) — Terms of service, Privacy policy.