<h2>Security for WooCommerce:</h2>
<p>Fraudsters often use VPNs and proxies to hide their identities, putting eCommerce businesses at risk. <strong data-start="102" data-end="130">Security for WooCommerce</strong> helps you detect and block high-risk transactions by identifying masked locations and restricting purchases from countries you don’t sell to. While it strengthens your store’s security, it does not protect against velocity attacks. For advanced fraud prevention, check out <a href="//woocommerce.com/products/woocommerce-anti-fraud/" rel="noopener" data-start="404" data-end="431"> Anti-Fraud for Woocommerce</a>.</p>
<h2><strong>Key Features</strong></h2>
<div class="two-columns">
<p></p>
<div class="twocol-one">
<h3><strong>Restrict Sales to a Single Country</strong></h3>
<p>If your business operates domestically, you can limit sales to a single country to focus on your target market and block unwanted traffic from other regions.</p>
<p><img class="alignnone wp-image-18734004756467" src="https://woocommerce.com/wp-content/uploads/2022/11/AllowOnlyTrafficFromCountry.webp?w=896" alt="Allow Only Traffic From one Country" width="693" height="390" /></p>
</div>
<div class="twocol-one">
<h3><strong>Manually Allow or Block Individual IP Addresses</strong></h3>
<p>With<strong> Security for WooCommerce,</strong> you can manually manage IP access by blocking suspicious users or allowing trusted ones. Add problematic IPs to the Blacklist to prevent fraud, or Whitelist trusted users like admins or virtual assistants for seamless access. This ensures secure, controlled access while protecting your store.<img class="alignnone wp-image-18734004756439" src="https://woocommerce.com/wp-content/uploads/2022/11/RandomIps.webp?w=896" alt="restrict access to cart at checkout" width="693" height="390" /><br />
<strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access to Cart and Checkout</strong></p>
<p>Enhances security by allowing you to restrict access to the cart and checkout pages based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756362" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictAccess.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access at the Product Level</strong></h3>
<p>Strengthens security by allowing you to restrict access to a product based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756380" src="https://woocommerce.com/wp-content/uploads/2022/11/AccessAtProductLevel.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Category-Based Product Restrictions</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Allows precise control over product visibility by region. The </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Category<br />
Restrictions On/Off </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">setting enables or disables category-based blocking, while </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Block Products by Category </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">lets you restrict specific WooCommerce product categories for visitors from blocked countries, ensuring compliance and a tailored shopping experience.</span></p>
<p><img class="alignnone wp-image-18734004756400" src="https://woocommerce.com/wp-content/uploads/2022/11/CategoryOnOff.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">For Publicly Accessible Download Product Links</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Secure your downloadable products with IP-based access control. Choose <strong>Whitelist Mode</strong> to block specific IPs or <strong>Blacklist Mode</strong> to allow only approved IPs. Custom error messages ensure unauthorized downloads are prevented, providing extra protection and control for your WooCommerce store.</span></p>
<p><img class="alignnone wp-image-18734004756395" src="https://woocommerce.com/wp-content/uploads/2022/11/PublicAccessibleDownloadlinks.webp?w=896" alt="whitelisting and blacklisting toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
</div>
</div>
</div>
</div>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="block visitors access between timeframe toggle and time range" width="693" height="390" /></p>
<h3><strong style="font-family: var(--wccom-font-family-header);font-size: var(--wp--preset--font-size--paragraph-medium,18px);letter-spacing: -0.02em">Enhanced Site Protection</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em;font-size: 16px">The comprehensive WooCommerce Security plugin includes features to enhance site protection. It can hide the WordPress version number to prevent attackers from identifying version-specific vulnerabilities. Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step. Additionally, a passcode protection feature allows restricted access using a configured username and password. All features are disabled by default.</span></p>
</div>
<div class="twocol-one">
<div class="flex max-w-full flex-col flex-grow">
<p><img class="alignnone wp-image-18734004756423" src="https://woocommerce.com/wp-content/uploads/2022/11/EnhancedSiteProteciton.webp?w=896" alt="enhanced site protection toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Scan Malware Manually</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables on-demand malware scans for your WordPress site, detecting security threats, suspicious code, and compromised files. Users can initiate a detailed scan with one click, receiving results that include the last scan date, infected files with suspected line numbers, and total threats found. The scanner checks PHP files, detects malicious patterns, and compares files against malware signatures, with results stored in the WordPress database and displayed in a table.</span></p>
</div>
</div>
</div>
</div>
<p><img class="alignnone wp-image-18734004756432" src="https://woocommerce.com/wp-content/uploads/2022/11/ScanMalware.webp?w=896" alt="scan malware manually button" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light"><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Directory and File Protection Settings</strong></div>
<div>These features help keep your site’s folders and files private and secure.<strong> Directory Listing Protection</strong> blocks people from browsing your folders, while <strong>File Indexing Protection</strong> prevents search engines from displaying sensitive files. Together, they keep your file structure hidden and your content safe. Both are off by default but can be easily turned on for extra security.</div>
<div><img class="alignnone wp-image-18734004756429" src="https://woocommerce.com/wp-content/uploads/2022/11/PreventDirectory.webp?w=896" alt="Prevent direct access directory on/off toggle" width="693" height="390" /></div>
</div>
</div>
</div>
<div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn">
<div class="flex-col gap-1 md:gap-3">
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="7ba194b5-e21f-46a2-9ae8-e3f0af69f4c8" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>The comprehensive <strong>Security for WooCommerce</strong> plugin ensures your website remains discoverable by allowing trusted search engine bots to index your site, even if they originate from blocked countries. You’ll receive <strong>email alerts</strong> whenever a blocked visitor attempts to log in via WP-Admin. Designed to help WooCommerce businesses block unwanted traffic, this plugin allows you to focus on serving genuine customers.</p>
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Empowers you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="Block visitors access between timeframe toggle" width="693" height="390" /></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="twocol-one last"></div>
</div>

Security

<h3>Stop Location Spoofing & Block VPN/Proxy Fraudsters</h3>

<div class="woo-sc-box alert">
<p class="text-light text-center mb-0 py-1 px-3"><b>TCF v2.3 takes effect on 28 February 2026</b> — <span style="font-weight: 400">sites that don’t update may have consent rejected, causing ads to switch to limited mode and reduce revenue</span>. <i><span style="font-weight: 400">This plugin supports the latest IAB TCF v2.3 consent requirements</span></i></p>
</div>
<p>WebToffee GDPR Cookie Consent for WooCommerce helps websites comply with privacy laws like GDPR, CCPA, and more by enabling cookie consent management through customizable banners, popups, and widgets.</p>
<p>It blocks non-essential cookies until consent is given, supports granular control by cookie category, integrates with Google Consent Mode v2, IAB TCF v2.3, and Microsoft Clarity Consent Mode, and offers features like Geo-targeting, multilingual support, advanced cookie scanning, consent logs, and a built-in cookie policy generator.</p>
<p><img class="size-medium wp-image-18734005527500 aligncenter" src="https://woocommerce.com/wp-content/uploads/2025/07/Frame-6637-1.png?w=840" alt="Advanced Features of the GDPR Cookie Consent extension " width="840" height="388" /></p>
<p><img class="wp-image-18734005526928 alignright" src="https://woocommerce.com/wp-content/uploads/2025/07/GDPR-EU-Cookie-Law-Compliance-1.png?w=800" alt="GDPR and EU cookie law compliance" width="451" height="463" /></p>
<p><strong>GDPR and EU Cookie Law Compliance</strong></p>
<p>Ensure your website meets GDPR and EU Cookie Law requirements with built-in tools for transparent consent management. The extension enables prior consent collection, automatic blocking of non-essential cookies, and clear categorization of cookie types. It also provides users with granular control over their consent preferences and the ability to revoke consent at any time.</p>
<p><strong>Supported EU cookie laws:</strong></p>
<ul>
<li>GDPR (EU and UK)</li>
<li>LGPD (Brazil)</li>
<li>PIPEDA (Canada)</li>
<li>Privacy Act (Australia)</li>
<li>POPIA (South Africa)</li>
<li>nFADP (Switzerland)</li>
<li>PDPL (Argentina)</li>
<li>PDPL (Andorra)</li>
</ul>
<p><img class="wp-image-18734005526958 alignleft" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/CPRA-and-US-Cookie-Consent-1.png?w=800" alt="CCPA/CPRA and US cookie consent" width="451" height="463" /></p>
<p> </p>
<p><strong>CCPA/CPRA and US Cookie Consent</strong></p>
<p><span style="font-weight: 400">Comply with CCPA, CPRA, and other U.S. privacy regulations by enabling clear opt-out mechanisms and transparent cookie usage disclosures. The extension supports “Do Not Sell or Share My Personal Information” links, honors Global Privacy Control (GPC) signals, and allows users to decline non-essential cookies.</span></p>
<p><b>Supported US State Laws: </b>CCPA/CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah)</p>
<p><img class="alignright wp-image-18734005527316" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-2.png?w=800" alt="Deploy a Customizable Cookie Consent Banner " width="451" height="463" /></p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Deploy A Customizable Cookie Consent Banner</strong></p>
<p><span style="font-weight: 400">Design and display a fully customizable, ADA-compliant, and responsive cookie consent banner that aligns with your brand and complies with privacy laws.</span></p>
<p><span style="font-weight: 400">Choose from various layouts like popups, bars, or boxes, and customize colors, text, and buttons to match your site’s look and feel. This extension allows you to add Accept, Reject, and Settings buttons to give users clear and accessible choices for managing their cookie preferences.</span></p>
<p> </p>
<p> </p>
<p> </p>
<p><img class="alignleft wp-image-18734005527329" src="https://woocommerce.com/wp-content/uploads/2025/07/Advanced-Cookie-Scanner-with-Automatic-Cookie-Blocker-1.png?w=800" alt="Advanced Cookie Scanner with Automatic Cookie Blocker " width="451" height="463" /></p>
<p> </p>
<p><strong>Advanced Cookie Scanner With Automatic Cookie Blocker</strong></p>
<p><span style="font-weight: 400">Effortlessly manage cookies on your website with the built-in advanced cookie scanner and automatic cookie blocker. The extension scans your website to detect all cookies in use and automatically categorizes them into groups like Necessary, Analytics, Advertising, and more. </span></p>
<p><span style="font-weight: 400">Once scanned, it enables you to block non-essential cookies by default until user consent is obtained, ensuring full compliance with GDPR and similar regulations.</span></p>
<p><img class="alignright wp-image-18734005527336" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-3.png?w=800" alt="Certified Google CMP Partner with Google Consent Mode, Microsoft Clarity Consent Mode & UET Support " width="451" height="463" /></p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Certified Google CMP Partner with  Google Consent Mode, Microsoft Clarity Consent Mode, and UET Support</strong></p>
<p><span style="font-weight: 400">As a Google-certified Consent Management Platform (CMP), the extension offers seamless integration with Google’s ads and analytical services. It ensures your website stays compliant with the latest standards for data privacy and digital advertising.</span></p>
<p><b>Supported Integration:</b></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Google Consent Mode</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">UET Consent Mode</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Microsoft Clarity Consent Mode</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">IAB TCF v2.3</span></li>
</ul>
<p><img class="alignleft wp-image-18734005527358" src="https://woocommerce.com/wp-content/uploads/2025/07/Geo-Targeted-Cookie-Banner-1.png?w=800" alt="Geo-Targeted Cookie Banner " width="451" height="463" /></p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Geo-Targeted Cookie Banner</strong></p>
<p><span style="font-weight: 400">Display cookie consent banners only where legally required using the extension’s built-in geo-targeting feature.</span></p>
<p><span style="font-weight: 400">This allows you to show or hide banners based on a visitor’s location, ensuring compliance with region-specific privacy laws like GDPR (EU), CCPA/CPRA (California), and more, without disrupting the user experience for others.</span></p>
<p><span style="font-weight: 400">By targeting users based on their IP addresses, you can minimize banner fatigue for global audiences while maintaining full compliance in applicable regions.</span></p>
<p><img class="alignright wp-image-18734005527375" src="https://woocommerce.com/wp-content/uploads/2025/07/Native-WordPress-Cookie-Consent-Solution-1.png?w=800" alt="Native WordPress Cookie Consent Solution" width="438" height="450" /></p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Native WordPress Cookie Consent Solution</strong></p>
<p><span style="font-weight: 400">This cookie consent solution integrates seamlessly with your site and supports the WP Consent API for smooth, reliable consent handling.</span></p>
<p><span style="font-weight: 400">All consent data is securely stored in your own database—never on external servers—ensuring full control, privacy, and compliance with data storage regulations.</span></p>
<p><img class="alignleft wp-image-18734005527391" src="https://woocommerce.com/wp-content/uploads/2025/07/Built-In-Free-Cookie-Policy-Generator-1.png?w=800" alt="Built-In Free Cookie Policy Generator " width="451" height="463" /></p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Built-In Free Cookie Policy Generator</strong></p>
<p><span style="font-weight: 400">Easily generate a compliant cookie policy for your website with this extension’s built-in cookie policy generator. It automatically pulls details from your scanned cookies, categorizes them, and creates a clear, user-friendly cookie policy page.</span></p>
<p><img class="alignright wp-image-18734005527402" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-2.png?w=800" alt="Keep a Consent Log " width="451" height="508" /></p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Keep A Consent Log</strong></p>
<p><span style="font-weight: 400">Maintain a complete, anonymized record of user consent to support compliance and auditing needs. The extension logs each visitor’s cookie preferences along with the date, time, and masked IP address.</span></p>
<p><span style="font-weight: 400">You can easily export these consent logs in CSV format for legal reference, reporting, or internal review, ensuring transparency and accountability in your consent management process.</span></p>
<p><img class="alignleft wp-image-18734005527420" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-3.png?w=800" alt="Translation-Ready for WordPress Multilingual Websites" width="451" height="508" /></p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
<p><strong>Translation-Ready for WordPress Multilingual Websites</strong></p>
<p><span style="font-weight: 400">Seamlessly deliver cookie consent experiences in multiple languages with built-in multilingual support.</span></p>
<p><span style="font-weight: 400">The extension is fully compatible with popular translation tools like WPML, qTranslate, and Polylang, ensuring your banner aligns with the language settings of your website.</span></p>
<p><span style="font-weight: 400">English is the default language, and the extension comes preloaded with several widely spoken European languages out of the box.</span></p>

GDPR Cookie Consent

<p>Deploy a cookie banner to comply with GDPR, CCPA, and other privacy laws.</p>

Security vs GDPR Cookie Consent