Integration

Age Verification for Shopify with eIDAS: Setup Guide

How to add privacy-first 18+ verification to your Shopify store with the eIDAS Pro app: the real settings, the checkout block, order tagging, what your store receives, and what it costs.

eIDAS Pro Team
January 18, 2026
7 min read

Corrected 20 October 2026: an earlier version of this post listed age_over_18, age_over_21 and age_over_25 as attributes you could request. The EUDI Wallet's PID has no age attribute (eIDAS Pro derives 18+ from the birth date), and the app currently checks one fixed threshold, 18+. We have also rewritten the setup guide to match the app as it actually ships: earlier versions described settings that do not exist (environment switch, verification triggers by order value, placement options, trust badges, fallback verification, analytics), claimed support for ID Austria, Smart-ID and BankID, presented the app as full KYC, quoted outdated prices (€29/€99/€299) and included illustrative case studies that were not real customers. Today the live method is bank eID (iDIN, for customers of Dutch banks); the EUDI Wallet method is not yet live in production.

Age verification, not full KYC

This guide covers the eIDAS Identity Verification app for Shopify. It answers one question at checkout: is this customer 18 or older? Your store gets a yes/no result. It does not receive a name, address, date of birth or ID number.

That makes it a fit for age-restricted products:

  • Alcohol, beer and wine
  • Tobacco, vaping and nicotine products
  • Adult products
  • Other goods your local law restricts to adults

It is not a full KYC or anti-money-laundering identification tool. If a regulation requires you to identify the customer by name and keep identity evidence (crypto, investment, payment or insurance products), a yes/no age result does not meet that duty.

Which verification methods work today

MethodStatusWhat the customer usesWhat your store receives
Bank eID (iDIN)LiveTheir own bank login, for customers of participating Dutch banksAn "age check passed" yes/no from the bank
EUDI WalletNot yet live in productionThe EU Digital Identity WalletA yes/no (eIDAS Pro reads the birth date once, derives 18+, and does not store the date)

iDIN is run through our broker partner IDURA. The bank answers the age question itself, so the date of birth never reaches eIDAS Pro or your store.

The EUDI Wallet method exists in the app and in our backend, but it stays off in production until relying-party access certificates (WRPAC) can be obtained, which is not possible anywhere in the EU yet. See What is WRPAC and why every business needs one.

Other national eID apps (for example ID Austria, Smart-ID, BankID or itsme) are not supported today. If most of your customers are outside the Netherlands, ask us before you rely on this app as your only check.

Step 1: Install the app and connect your API key

  1. Install the eIDAS Identity Verification app on your store. Contact us for the install link.
  2. Approve the permissions. The app asks for read/write access to checkouts and orders (to show the checkout block and tag orders) and write access to products.
  3. In the eIDAS Pro client dashboard, create an API key.
  4. In Shopify admin, open the app and go to eIDAS Verification Settings.

The settings page checks your key and shows its status:

  • Connected — [tier] tier: the key is valid and has an active subscription.
  • Demo mode only: the key is valid but has no active subscription, so verification runs in demo only.
  • Invalid API key: the key is invalid or revoked.

Step 2: Configure the settings

These are all the settings the app has.

General

  • Enable eIDAS Verification: turns verification on for gated checkouts.
  • Backend API URL: the URL of the eIDAS Pro verification backend.
  • Merchant API Key: the key from the client dashboard.

Verification

  • Verification Method: eID (national eID scheme) or EUDI Wallet. Choose eID: it is the method that is live today.
  • Minimum Age: shown, but locked. The backend enforces a fixed 18+ for every merchant, so this field has no effect yet.

Gating Scope

  • Apply verification to: All products, Specific collections (enter collection IDs) or Specific product tags (enter tags such as age-restricted).
  • Enforcement hold: if enabled, orders without a completed verification are put on a fulfillment hold, so you do not ship them by mistake.

Step 3: Add the verification block to your checkout

The app ships two storefront pieces:

  • Age Verify (checkout UI extension): a block you place in the checkout editor (Settings → Checkout → Customize). It shows "Verify your age" and a code to scan with the phone. When the block's "block checkout progress" permission is granted, the customer cannot complete checkout until the check has passed.
  • eIDAS Age Verify (Cart) (theme app extension): an optional block you can add to the cart page in the theme editor, so customers can verify before they reach checkout.

Which checkout steps a checkout UI extension can appear in depends on your Shopify plan. Check Shopify's current documentation for your plan.

Step 4: How orders are recorded

For every new order, the app asks the eIDAS Pro backend for the verification result and adds a tag to the order. With Enforcement hold enabled, unverified orders also get a fulfillment hold with the note "Age verification not completed … held for compliance review". The tag is your compliance record in Shopify; no identity data is stored on the order.

Step 5: Test before going live

  1. Use an API key without a subscription (it runs in Demo mode only), or a test store.
  2. Tag a test product (for example age-restricted) and set Apply verification to to that tag.
  3. Go through checkout as a customer and confirm the block appears, blocks checkout until verified, and shows "Age verified" afterwards.
  4. Place the order and check that the order tag (and the hold, if enabled) is set.

When you subscribe, the same key switches to Connected and real verifications start.

What the customer sees

  1. The customer reaches checkout with an age-restricted product.
  2. The Verify your age block asks them to scan a code with their phone.
  3. On the phone, they log in with their bank through iDIN and approve sharing the age answer.
  4. The block changes to Age verified and checkout can continue.

No document photos, no selfies and no manual review queue.

Privacy policy text

Add a short section to your privacy policy. A starting point:

Age verification

For age-restricted products, we check that you are 18 or older using eIDAS Pro. You confirm your age with your bank's identity service (iDIN). We receive only the result ("18 or older: yes/no"), never your name, date of birth, address or documents.

We keep the verification result with your order for [period]. You can ask us for access or deletion at [support@yourstore.com]. See the eIDAS Pro Privacy Policy for how eIDAS Pro processes the data.

You remain the controller for the results you keep in Shopify, so you still need a retention period and a way to answer data-subject requests. What you do not need is a process for storing ID scans or biometric data.

Pricing

PlanPriceIncluded verificationsThen
CommunityFreeSDK, DEMO and MOCK modes onlyNo managed verification
Starter€79/month75€0.75 each
Standard€279/month350€0.65 each
Scale€679/month1,000€0.55 each

Custom branding and an SLA start at Standard; webhooks and white-label are part of Scale. See full pricing.

Worked example, 1,000 verifications a month:

  • Standard: €279 + (1,000 − 350) × €0.65 = €279 + €422.50 = €701.50/month
  • Scale: €679 (1,000 included) = €679/month

At that volume, Scale is the cheaper plan. Compare this with what you pay today per document check, plus the staff time for manual review.

Common issues

"I don't have iDIN." Only customers of participating Dutch banks can use the live method today. Plan another route for other customers, and talk to us about your markets.

The block does not stop checkout. The "block checkout progress" permission has not been granted to the extension. The block shows a warning in that case.

"Couldn't verify API key". The app could not reach the backend. Check the Backend API URL.

Conclusion

The eIDAS Pro Shopify app gives you a privacy-first 18+ check: bank eID today, the EUDI Wallet once it can go live, and only a yes/no in your store. For background on the bank-eID route, read why we are bringing in eID.


Want to add age verification to your Shopify store? Book a consultation to discuss your markets and products.

Related Articles

Share this article

Help others learn about eIDAS verification