{"id":382051,"date":"2026-10-13T07:52:19","date_gmt":"2026-10-13T07:52:19","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/trustgate-registration\/"},"modified":"2026-10-13T09:43:01","modified_gmt":"2026-10-13T09:43:01","slug":"hdyhaus-identity-verification","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/hdyhaus-identity-verification\/","author":14945046,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.9.9","stable_tag":"0.9.9","tested":"7.1.3","requires":"6.4","requires_php":"8.1","requires_plugins":null,"header_name":"HDYHaus Identity Verification","header_author":"HDY Haus","header_description":"Verify people during WordPress registration with pluggable identity verification providers. Prembly support is the first provider.","assets_banners_color":"4d5c60","last_updated":"2026-10-13 09:43:01","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/github.com\/HDYHaus\/identity-verification","header_author_uri":"https:\/\/hdyhaus.com\/wp-plugins\/identity-verification","rating":0,"author_block_rating":0,"active_installs":0,"downloads":71,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"0.9.8":{"tag":"0.9.8","author":"mariaojob","date":"2026-10-13 07:51:53","revision":3743202},"0.9.9":{"tag":"0.9.9","author":"mariaojob","date":"2026-10-13 09:43:01","revision":3743431}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3743202,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3743202,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3743202,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3743202,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.9.8","0.9.9"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3743431,"resolution":"1","location":"assets","locale":"","width":1280,"height":1038},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3743431,"resolution":"2","location":"assets","locale":"","width":1280,"height":1300},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3743431,"resolution":"3","location":"assets","locale":"","width":1280,"height":1105}},"screenshots":{"1":"HDYHaus Identity Verification adds identity verification fields, explicit consent, and a verification action to the native WordPress registration screen.","2":"Global Registration settings separate verification provider policies from website privacy and terms\/disclaimer links.","3":"Prembly settings keep Sandbox and Live widget credentials separate and control the active verification provider."}},"plugin_section":[],"plugin_tags":[26873,150636,286344,603,600],"plugin_category":[54,58],"plugin_contributors":[276626],"plugin_business_model":[],"class_list":["post-382051","plugin","type-plugin","status-publish","hentry","plugin_tags-identity-verification","plugin_tags-kyc","plugin_tags-prembly","plugin_tags-registration","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_category-user-management","plugin_contributors-mariaojob","plugin_committers-mariaojob"],"banners":{"banner":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/banner-772x250.png?rev=3743202","banner_2x":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/banner-1544x500.png?rev=3743202","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/icon-128x128.png?rev=3743202","icon_2x":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/icon-256x256.png?rev=3743202","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/screenshot-1.png?rev=3743431","caption":"HDYHaus Identity Verification adds identity verification fields, explicit consent, and a verification action to the native WordPress registration screen."},{"src":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/screenshot-2.png?rev=3743431","caption":"Global Registration settings separate verification provider policies from website privacy and terms\/disclaimer links."},{"src":"https:\/\/ps.w.org\/hdyhaus-identity-verification\/assets\/screenshot-3.png?rev=3743431","caption":"Prembly settings keep Sandbox and Live widget credentials separate and control the active verification provider."}],"raw_content":"<!--section=description-->\n<p>HDYHaus Identity Verification adds identity verification to the default WordPress registration page. When a provider is enabled, WordPress creates the account only after the provider confirms a successful verification.<\/p>\n\n<p>HDYHaus Identity Verification is a verification gate, not a membership suite. It does not replace the registration form, add payment processing, restrict content, or create membership levels.<\/p>\n\n<h4>Features<\/h4>\n\n<ul>\n<li>Adds identity verification to <code>wp-login.php?action=register<\/code>.<\/li>\n<li>Confirms the result server-side before allowing account creation.<\/li>\n<li>Binds each verification to the submitted email, configured widget, and one-time registration attempt.<\/li>\n<li>Prevents a completed verification session from being reused for another account.<\/li>\n<li>Prevents the same verified identity document from creating another account, even after account deletion.<\/li>\n<li>Keeps Sandbox and Live Prembly credentials separate.<\/li>\n<li>Supports an optional same-site success redirect with email activation instructions.<\/li>\n<li>Lets site owners customize the plain-text consent message, provider policy links, and a website terms\/disclaimer page or URL.<\/li>\n<li>Stores normalized verification metadata in the WordPress user account.<\/li>\n<li>Integrates with WordPress personal data export and erasure tools.<\/li>\n<li>Uses a provider adapter architecture, with Prembly as the first provider.<\/li>\n<\/ul>\n\n<p>HDYHaus Identity Verification supports identity verification and KYC workflows. Installing it does not by itself make a website compliant with any law or regulatory framework. Site owners remain responsible for their verification policy, lawful basis, privacy notice, retention period, and provider configuration.<\/p>\n\n<h3>External Service: Prembly<\/h3>\n\n<p>This plugin connects to Prembly, an external identity verification service, when Prembly is enabled by a site administrator.<\/p>\n\n<p>The Prembly browser SDK is loaded from <code>https:\/\/js.prembly.com\/v1\/inline\/widget-v3.js<\/code> on the default WordPress registration page. When a registrant selects Verify Identity, HDYHaus Identity Verification sends their first name, last name, email address, a temporary user reference, the configured Widget Key, and Configuration ID to Prembly. Prembly's verification interface may collect identity document images, selfies, biometric information, device information, and IP-derived location information according to the checks selected by the site administrator.<\/p>\n\n<p>After the verification interface reports completion, the site's WordPress server requests the corresponding session from <code>https:\/\/backend.prembly.com\/api\/v1\/checker-widget\/sdk\/sessions\/{session_id}\/<\/code>. HDYHaus Identity Verification uses that response to confirm the session status, email address, widget configuration, session ID, and verified document identity. The complete Prembly report remains available in the site owner's Prembly dashboard; HDYHaus Identity Verification stores only normalized verification metadata and site-specific one-way fingerprints in WordPress.<\/p>\n\n<p>This service is provided by Prembly Inc:<\/p>\n\n<ul>\n<li>Prembly: https:\/\/prembly.com\/<\/li>\n<li>Prembly Data Protection Policy: https:\/\/prembly.com\/data-protection\/<\/li>\n<\/ul>\n\n<p>The Data Protection Policy is the default provider policy link. Site administrators can replace it and optionally add a working provider terms or consent URL under <strong>Identity Verification &gt; Registration<\/strong>. When WordPress has a website Privacy Policy configured, HDYHaus Identity Verification displays that link separately. Website terms or a disclaimer can also be linked by selecting a published WordPress page or entering a custom URL.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate HDYHaus Identity Verification.<\/li>\n<li>In WordPress, enable <strong>Settings &gt; General &gt; Anyone can register<\/strong>.<\/li>\n<li>In Prembly, create separate SDK Setup widgets for Sandbox and Production as needed.<\/li>\n<li>In WordPress, open <strong>Identity Verification &gt; Settings &gt; Prembly<\/strong>.<\/li>\n<li>Add the Widget Key and Configuration ID for the appropriate environment.<\/li>\n<li>Choose Sandbox or Live and select <strong>Enable Prembly<\/strong>.<\/li>\n<li>Add identity verification information to the site's privacy policy. Suggested text is available under <strong>Settings &gt; Privacy<\/strong>.<\/li>\n<li>Test the full registration and password-setup email flow before opening registration to visitors.<\/li>\n<\/ol>\n\n<p>No Prembly Secret API Key, Organisation ID, or App ID is required for the SDK session confirmation used by this plugin.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20hdyhaus%20identity%20verification%20replace%20the%20wordpress%20registration%20form%3F\"><h3>Does HDYHaus Identity Verification replace the WordPress registration form?<\/h3><\/dt>\n<dd><p>No. Version 0.9.9 integrates with the default WordPress registration screen. It does not currently add verification to WooCommerce, BuddyPress, MemberPress, Ultimate Member, or other custom registration forms.<\/p><\/dd>\n<dt id=\"what%20happens%20when%20prembly%20is%20disabled%3F\"><h3>What happens when Prembly is disabled?<\/h3><\/dt>\n<dd><p>HDYHaus Identity Verification registers no verification hooks or Prembly scripts. Normal WordPress registration continues, and saved Prembly settings are preserved.<\/p><\/dd>\n<dt id=\"does%20this%20plugin%20send%20data%20to%20a%20third%20party%3F\"><h3>Does this plugin send data to a third party?<\/h3><\/dt>\n<dd><p>Yes, when Prembly is enabled and a registrant starts verification. See the <strong>External Service: Prembly<\/strong> section for the exact service, data flow, and legal links.<\/p><\/dd>\n<dt id=\"are%20secret%20api%20keys%20required%20or%20exposed%3F\"><h3>Are secret API keys required or exposed?<\/h3><\/dt>\n<dd><p>No. This integration uses Prembly's Widget Key and Configuration ID in the browser. The session confirmation endpoint uses the session ID and does not require the Secret API Key, Organisation ID, or App ID.<\/p><\/dd>\n<dt id=\"does%20hdyhaus%20identity%20verification%20store%20identity%20documents%20or%20selfies%20in%20wordpress%3F\"><h3>Does HDYHaus Identity Verification store identity documents or selfies in WordPress?<\/h3><\/dt>\n<dd><p>No. For a successfully created account, HDYHaus Identity Verification stores whether verification succeeded, the normalized verification status, verification time, provider slug, Prembly session reference, site-specific one-way session and identity hashes, and the accepted consent time, wording, and version. Documents, document numbers, selfies, biometric information, raw Prembly responses, and detailed reports are processed by Prembly and are not copied into WordPress by this plugin.<\/p><\/dd>\n<dt id=\"can%20the%20same%20verified%20person%20create%20more%20than%20one%20account%3F\"><h3>Can the same verified person create more than one account?<\/h3><\/dt>\n<dd><p>No. HDYHaus Identity Verification derives a site-specific one-way fingerprint from the verified document country, type, and number returned by Prembly. It never stores the document number. The fingerprint is retained after privacy erasure or account deletion so the same identity cannot register again.<\/p><\/dd>\n<dt id=\"can%20verification%20metadata%20be%20exported%20or%20erased%3F\"><h3>Can verification metadata be exported or erased?<\/h3><\/dt>\n<dd><p>Yes. HDYHaus Identity Verification integrates with <strong>Tools &gt; Export Personal Data<\/strong> and <strong>Tools &gt; Erase Personal Data<\/strong>. Erasure retains one-way session-reference and identity hashes to prevent reuse of a completed verification or identity. Site owners should establish an appropriate retention policy and confirm any separate deletion obligations in Prembly.<\/p><\/dd>\n<dt id=\"can%20i%20change%20the%20consent%20wording%20and%20provider%20links%3F\"><h3>Can I change the consent wording and provider links?<\/h3><\/dt>\n<dd><p>Yes. Open <strong>Identity Verification &gt; Registration<\/strong> to edit the plain-text consent message and the verification provider's privacy\/data-protection and optional terms\/consent URLs. The website's WordPress Privacy Policy is displayed separately when configured under <strong>Settings &gt; Privacy<\/strong>. For your website's own terms or disclaimer, select a published WordPress page or enter a custom URL. HDYHaus Identity Verification stores the exact accepted wording and a version fingerprint tied to the displayed disclosure for successful registrations.<\/p><\/dd>\n<dt id=\"does%20hdyhaus%20identity%20verification%20support%20multisite%3F\"><h3>Does HDYHaus Identity Verification support multisite?<\/h3><\/dt>\n<dd><p>This release is tested for single-site WordPress installations. Multisite and network activation have not been verified and are not currently supported.<\/p><\/dd>\n<dt id=\"where%20can%20i%20get%20support%3F\"><h3>Where can I get support?<\/h3><\/dt>\n<dd><p>Report plugin bugs at https:\/\/github.com\/HDYHaus\/identity-verification\/issues\/. For verification widget configuration, billing, or provider reports, contact Prembly through https:\/\/prembly.com\/.<\/p><\/dd>\n<dt id=\"does%20this%20make%20my%20site%20kyc%20compliant%3F\"><h3>Does this make my site KYC compliant?<\/h3><\/dt>\n<dd><p>No plugin can guarantee legal or regulatory compliance. HDYHaus Identity Verification provides an identity-verification gate that can support a site's KYC workflow. Obtain appropriate legal advice for the site's countries, audience, and use case.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.9.9<\/h4>\n\n<ul>\n<li>Link the HDY Haus author credit to the plugin landing page.<\/li>\n<li>Use Prembly's Data Protection Policy and remove the obsolete default Terms link.<\/li>\n<li>Correct saved legacy provider policy defaults while retaining custom URLs.<\/li>\n<li>Refresh listing screenshots to match the Identity Verification menu label.<\/li>\n<\/ul>\n\n<h4>0.9.8<\/h4>\n\n<ul>\n<li>Rename the plugin to HDYHaus Identity Verification.<\/li>\n<li>Use a persistent plugin secret for identity fingerprints independent of WordPress authentication salts.<\/li>\n<li>Require a valid registration-form nonce before processing verification fields.<\/li>\n<li>Update public repository and support links.<\/li>\n<\/ul>\n\n<h4>0.9.7<\/h4>\n\n<ul>\n<li>Move global registration settings to HDYHaus Identity Verification &gt; Registration.<\/li>\n<li>Clarify recommended verification provider privacy and terms links and the website Privacy Policy configuration.<\/li>\n<li>Add a published WordPress page selector or custom URL for website terms\/disclaimers, included in the consent record fingerprint.<\/li>\n<\/ul>\n\n<h4>0.9.6<\/h4>\n\n<ul>\n<li>Create the settings option directly on its first save so values remain stored after cache flushes and plugin deactivation.<\/li>\n<\/ul>\n\n<h4>0.9.5<\/h4>\n\n<ul>\n<li>Preserve the internal settings-tab marker so fresh installations remain correct when WordPress sanitizes a new option twice.<\/li>\n<\/ul>\n\n<h4>0.9.4<\/h4>\n\n<ul>\n<li>Fix the settings handler so WordPress sanitizes each submission exactly once and persists every field after reload.<\/li>\n<\/ul>\n\n<h4>0.9.3<\/h4>\n\n<ul>\n<li>Fix saving provider activation and Prembly widget settings after a fresh installation.<\/li>\n<li>Route settings updates through a nonce-protected HDYHaus Identity Verification admin handler.<\/li>\n<\/ul>\n\n<h4>0.9.2<\/h4>\n\n<ul>\n<li>Prevent one verified identity document from creating multiple WordPress accounts.<\/li>\n<li>Retain only a site-specific one-way identity fingerprint after privacy erasure or account deletion.<\/li>\n<li>Fail closed when a completed provider response lacks a stable document identity.<\/li>\n<\/ul>\n\n<h4>0.9.1<\/h4>\n\n<ul>\n<li>Add a read-only HDYHaus Identity Verification verification and consent record to WordPress user profile screens for administrators.<\/li>\n<li>Show when privacy erasure has removed verification details while retaining replay protection.<\/li>\n<\/ul>\n\n<h4>0.9.0<\/h4>\n\n<ul>\n<li>Require the Prembly session ID, widget configuration, and end-user email to match before registration.<\/li>\n<li>Add explicit registrant consent before opening identity verification.<\/li>\n<li>Allow site owners to customize consent wording and provider legal links safely.<\/li>\n<li>Add WordPress privacy policy guidance and personal data export and erasure support.<\/li>\n<li>Correct the Prembly external-service disclosure and current credential requirements.<\/li>\n<li>Add provider response and privacy integration tests with repeatable release packaging.<\/li>\n<\/ul>\n\n<h4>0.1.6<\/h4>\n\n<ul>\n<li>Use Prembly's session-ID-only status lookup and remove unused API key, Organisation ID, and App ID requirements.<\/li>\n<\/ul>\n\n<h4>0.1.5<\/h4>\n\n<ul>\n<li>Apply a same-site success redirect with email activation instructions.<\/li>\n<\/ul>\n\n<h4>0.1.4<\/h4>\n\n<ul>\n<li>Add exclusive provider tabs, provider resolution, and provider-specific advanced settings.<\/li>\n<\/ul>\n\n<h4>0.1.3<\/h4>\n\n<ul>\n<li>Add a top-level HDYHaus Identity Verification admin area, Plugins screen settings link, and separate Sandbox and Live credentials.<\/li>\n<\/ul>\n\n<h4>0.1.2<\/h4>\n\n<ul>\n<li>Use Prembly's widget-specific key and current V3 browser SDK.<\/li>\n<\/ul>\n\n<h4>0.1.1<\/h4>\n\n<ul>\n<li>Support Prembly V3 SDK session callbacks and server-side session confirmation.<\/li>\n<\/ul>\n\n<h4>0.1.0<\/h4>\n\n<ul>\n<li>Initial development scaffold.<\/li>\n<\/ul>","raw_excerpt":"Verify a person's identity before WordPress creates their account, without replacing the native registration flow.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/382051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=382051"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/mariaojob"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=382051"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=382051"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=382051"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=382051"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=382051"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=382051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}