Connect Your Store

Open OrderTrackify → Settings and use the one-click authorisation flow. WordPress exchanges a short-lived callback code plus its locally retained verifier for the store-bound key; no manual key copying is required.

One-click Connection

  1. Open OrderTrackify → Settings in WordPress.
  2. Select Connect to OrderTrackify.
  3. Sign in or register in the OrderTrackify dashboard.
  4. Approve the connection. The browser returns only a short-lived one-time code to the same signed-in WordPress administrator.
  5. WordPress proves possession of its locally retained verifier in a server-to-server exchange, stores the issued store-bound key, and checks connection health.
  6. Confirm that the Settings screen reports the store as connected.

How the Flow Is Secured

The initial signed state binds the exact store origin, callback URL, and SHA-256 verifier challenge. The permanent plugin key never appears in a browser URL or dashboard response, the exchange code is atomic and expires after five minutes, and API keys are stored as hashes by the SaaS.

Key rotation: Rotating the merchant's plugin key immediately invalidates the previous key. Reconnect the WooCommerce plugin with the newly issued key after rotation.