ageonce

AgeOnce helps WooCommerce stores protect age-restricted products and content with a secure age verification flow. Use it for alcohol, tobacco, vaping, cannabis, adult content, supplements, events, memberships, or any other WordPress content that should be shown only after age verification.
Instead of relying on a simple “Are you 18?” popup, AgeOnce sends the visitor through a dedicated verification flow and then returns them to your store. The plugin can block WooCommerce checkout until verification is complete, protect selected posts or pages, and record verification details on WooCommerce orders.
You can start with the AgeOnce free plan. No credit card is required for the free tier, so you can install the plugin, connect your site, and test the full WooCommerce or content restriction flow before upgrading.
<h4>Why stores use AgeOnce</h4>
<ul>
<li>Protect checkout for restricted products – Require age verification only when the cart contains products or categories that need it.</li>
<li>Avoid blanket age gates – Keep normal products and public content open while gating only the items that require verification.</li>
<li>Support 16+, 18+, and 21+ rules – Configure different minimum ages for different product categories, tags, posts, pages, or custom post types.</li>
<li>Keep proof on WooCommerce orders – Store the verification status, transaction ID, and timestamp with the order.</li>
<li>Start free – Use the free AgeOnce plan to test real verification before moving to a paid plan.</li>
<li>Use one verification flow across your site – The same AgeOnce verification can unlock checkout and protected content.</li>
<li>Respect privacy – The plugin only contacts AgeOnce when a visitor chooses to verify their age.</li>
</ul>
<h4>Features</h4>
<ul>
<li>WooCommerce checkout age gate – Disable checkout until the customer completes age verification for restricted cart items.</li>
<li>Product-level control – Mark individual WooCommerce products as requiring age verification.</li>
<li>Category and tag rules – Protect products, posts, pages, and custom post types by taxonomy.</li>
<li>Manual content locking – Add an AgeOnce metabox to lock individual posts or pages regardless of taxonomy.</li>
<li>Multiple age thresholds – Configure 16+, 18+, and 21+ rules from the same settings screen.</li>
<li>Order verification metadata – Save verification status, transaction ID, and verification time on WooCommerce orders.</li>
<li>Secure OAuth flow – Uses state/nonce checks and server-to-server token exchange with AgeOnce.</li>
<li>Content protection without WooCommerce – Gate posts, pages, and custom post types even if WooCommerce is not active.</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>WooCommerce 5.0 or higher (for checkout protection)</li>
<li>AgeOnce account with OAuth credentials (Client ID and Client Secret)</li>
</ul>
<h4>Getting Started</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Create an account at <a href="https://www.ageonce.com" rel="nofollow ugc">AgeOnce</a> and start with the free plan or choose a paid plan</li>
<li>Go to AgeOnce Settings in the admin menu</li>
<li>Copy the Redirect URL from WordPress into your AgeOnce dashboard</li>
<li>Enter your Client ID and Client Secret in WordPress</li>
<li>Click Test connection to confirm the OAuth setup</li>
<li>Configure rules for WooCommerce products, categories, tags, posts, pages, or custom post types</li>
<li>Save changes and run one checkout or restricted content test</li>
</ol>
For the WordPress setup guide, see <a href="https://docs.ageonce.com/wordpress" rel="nofollow ugc">AgeOnce WordPress documentation</a>. For plans, see <a href="https://www.ageonce.com/pricing" rel="nofollow ugc">AgeOnce pricing</a>.
<h4>Privacy</h4>
This plugin sends data to the AgeOnce service (app.ageonce.com, api.ageonce.com) only when a user explicitly starts age verification, such as clicking “Verify Age” at checkout or on restricted content. No tracking or data collection occurs without that user action.
The plugin does not send WordPress account passwords to AgeOnce. It may store a verification flag in the WooCommerce session or a cookie, and it may store verification metadata on WooCommerce orders. See the <a href="https://www.ageonce.com" rel="nofollow ugc">AgeOnce service</a> for privacy and terms.
<h3>External services</h3>
This plugin relies on third-party services operated by AgeOnce (the verification provider). They are required for OAuth login and token exchange so the site can confirm age verification.
<ul>
<li>
AgeOnce web app (app.ageonce.com) — Used for the user-facing OAuth authorization screen when someone clicks “Verify Age”. The browser is redirected here with your site’s OAuth client ID, redirect URI, a state value, and required minimum age. The user completes verification on AgeOnce; no WordPress account password is sent to AgeOnce.
</li>
<li>
AgeOnce API (api.ageonce.com) — Used when the user returns to your site with an authorization code. The plugin sends a server-to-server request to exchange that code for an access token: it transmits the authorization code, redirect URI, OAuth state, and HTTP Basic authentication using your Client ID and Client Secret (stored in WordPress options). On success, the plugin may store a verification flag in the WooCommerce session or a cookie and optional transaction metadata for orders. This happens only during that callback after the user completes the flow.
</li>
<li>
Terms and privacy (AgeOnce) — <a href="https://app.ageonce.com/terms" rel="nofollow ugc">Terms of service</a>, <a href="https://app.ageonce.com/privacy" rel="nofollow ugc">Privacy policy</a>.
</li>
</ul>

AgeOnce Age Verification for WooCommerce

Age verification for WooCommerce checkout and restricted content, powered by secure AgeOnce verification.

AAM Plugin

Advanced Access Manager (AAM) introduces Access Governance for WordPress – a systematic approach to securing your site by controlling who can access what, when, and why.
Most WordPress security plugins focus on external threats like malware, firewalls, and brute-force attacks. AAM addresses the root cause of the #1 WordPress security risk: broken access controls, excessive privileges, and misconfigured roles.
Instead of reacting to attacks, AAM helps you design security into your WordPress site.
<h4>What Access Governance means in practice</h4>
<ul>
<li>Mitigate Broken Access Controls. Ensure roles, users, and permissions are correctly configured to prevent unauthorized actions and privilege escalation.</li>
<li>Eliminate Excessive Privileges. Identify overpowered users and reduce access to critical functionality, admin areas, and APIs.</li>
<li>Secure Content by Design. Control who can view, edit, publish, or delete posts, pages, media, taxonomies, and custom content types.</li>
<li>Govern Access with Policy. Define access rules using JSON Access Policies — portable, auditable, and automation-friendly.</li>
<li>Build Custom Security Logic. Use the AAM PHP Framework to create advanced, programmatic access controls tailored to your application.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Security Audit. Detect risky role assignments, misconfigurations, and compromised accounts.</li>
<li>Granular Access Control. Manage permissions for any user, role, or visitor with precision.</li>
<li>Role & Capability Management. Customize WordPress roles and capabilities beyond defaults.</li>
<li>Admin & Menu Control. Restrict dashboard areas and tailor the admin experience per user or role.</li>
<li>API & Endpoint Protection. Secure REST and XML-RPC access with fine-grained controls.</li>
<li>Modern Authentication Options. Support passwordless and secure login flows.</li>
<li>Developer-Ready Framework. Extend WordPress security using AAM’s powerful SDK.</li>
<li>Ad-Free & Transparent. – No ads, no tracking, no bloat.</li>
</ul>
<h4>Built for Security-Conscious WordPress Users</h4>
AAM is trusted by 150,000+ websites to deliver enterprise-grade access control without unnecessary complexity. Whether you’re a site owner, agency, developer, or security professional, AAM gives you full control over WordPress access — by design.
Most core features are free. Advanced capabilities are available via premium add-ons.
No hidden tracking. No data collection. No unwanted changes. 
Just security you can reason about, audit, and trust.

Advanced Access Manager – Access Governance for WordPress

This plugin made it so easy to create accounts for coworkers who only need to do one or two tasks on a website and it's so easy to do. :) 

I love this plugin!

Use at your own risk as the plugin author @vasyltech never replies to support messages on here.

No support

Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.

AgeOnce Age Verification for WooCommerce vs Advanced Access Manager – Access Governance for WordPress