Skip to main content

Installation & Setup

Prerequisites​

Before installing Signifyd for WooCommerce, ensure you have:

  • WordPress 6.4 or higher
  • WooCommerce 8.0 or higher installed and activated
  • PHP 8.0 or higher with cURL extension enabled
  • Valid Signifyd account and API credentials
  • HTTPS enabled (recommended for webhook security)

Installation Steps​

1. Upload Plugin Files​

Upload the plugin files to your WordPress installation:

wp-content/plugins/signifyd-for-woocommerce/

Or install via WordPress admin:

  1. Navigate to Plugins > Add New
  2. Click Upload Plugin
  3. Select the plugin ZIP file
  4. Click Install Now

2. Activate Plugin​

After uploading, activate the plugin:

  • Via WP Admin: Plugins > Installed Plugins → Find "Signifyd For Woocommerce" → Click Activate
  • Via WP-CLI: wp plugin activate signifyd-for-woocommerce

3. Configure API Credentials​

  1. Navigate to Settings > Signifyd in WordPress admin
  2. Enter your Signifyd API credentials:
    • Production API Key — For live orders
    • Development API Key — For testing
  3. Select Development Mode or Production environment
  4. Click Save

Signifyd can send decision updates via webhooks. To enable:

  1. Log in to your Signifyd dashboard
  2. Navigate to Settings > Webhooks
  3. Add a new webhook endpoint: 
    https://yoursite.com/wp-json/suma-signifyd/v1/webhook
  4. Select events to monitor:
    • cases/test (for testing)
    • cases/review
    • cases/rescore
  5. Copy the webhook secret key
  6. The plugin automatically validates HMAC signatures

5. Test Configuration​

After setup, test the integration:

  1. Enable Burn-in Mode — This sends orders to Signifyd without taking action
  2. Place a test order in WooCommerce
  3. Check WooCommerce > Orders for the test order
  4. Verify Signifyd metadata appears in order details
  5. Check logs in wp-content/uploads/wc-logs/ for:
    • signifyd-for-woocommerce-{date}.log — API requests/responses
    • signifyd-for-woocommerce-webhooks-{date}.log — Webhook activity
  6. Confirm order appears in Signifyd dashboard

6. Go Live​

Once testing is complete:

  1. Disable Burn-in Mode to enable automatic order actions
  2. Set Development Mode to Production
  3. Monitor logs and Signifyd dashboard for first few orders
  4. Configure email notifications for fraud alerts (optional)

Quick Start Example​

Minimal configuration for testing:

// In wp-config.php or functions.php (for testing only)
define('SIGNIFYD_TEST_MODE', true);

Settings to configure:

  • ✅ Enable Plugin: Checked
  • ✅ Enable Burn-in Mode: Checked (for initial testing)
  • ✅ Development Mode: Development
  • ✅ Development API Key: Your test API key
  • ⬜ Enable Fulfillment: Unchecked (until testing complete)

Verification Checklist​

After installation, verify:

  • Plugin appears in Plugins > Installed Plugins
  • Settings page accessible at Settings > Signifyd
  • API credentials saved successfully
  • Test order submitted to Signifyd
  • Signifyd metadata visible in order details
  • Logs generated in wp-content/uploads/wc-logs/
  • Webhook endpoint responding (if configured)
  • Decision actions work as expected

Troubleshooting Installation​

Plugin Not Visible After Activation​

Cause: WooCommerce not installed or activated
Solution: Install and activate WooCommerce first. The plugin requires WooCommerce to function.

Settings Page Not Appearing​

Cause: Insufficient user permissions
Solution: Ensure logged-in user has manage_options capability (Administrator role).

API Errors After Configuration​

Cause: Invalid API credentials or network issues
Solution:

  • Verify API key is correct (no extra spaces)
  • Check that cURL extension is enabled: php -m | grep curl
  • Verify server can reach Signifyd API: curl -I https://api.signifyd.com

Orders Not Submitting to Signifyd​

Cause: Plugin not enabled or order status not triggering submission
Solution:

  • Ensure "Enable Plugin" checkbox is checked
  • Verify order reaches "Processing" or "Payment Complete" status
  • Check if order ID is below "Starting Post Id" setting
  • Review logs for error messages

Webhook Not Receiving Updates​

Cause: Webhook endpoint not reachable or HMAC validation failing
Solution:

  • Verify webhook URL is publicly accessible
  • Test with: curl https://yoursite.com/wp-json/suma-signifyd/v1/webhook
  • Check webhook logs for validation errors
  • Ensure HTTPS is properly configured

Uninstallation​

To remove the plugin:

  1. Deactivate via Plugins > Installed Plugins
  2. Click Delete to remove plugin files
  3. Manual cleanup (if needed):
    • Remove option: suma_signifyd_plugin_options
    • Remove order meta keys starting with signifyd_
    • Delete logs: wp-content/uploads/wc-logs/signifyd-*

Next Steps​