Before you install SecureHold WP
SecureHold WP is a WooCommerce extension. Before installing it, confirm that the following are already in place on your site.
- WordPress is installed and running a recent, supported version.
- WooCommerce is installed, activated and configured with at least one product.
- WooCommerce Stripe Gateway is installed and configured with your Stripe API keys.
- Stripe account is active and accessible. You will need both your test and live API keys during setup.
- SSL is enabled. Stripe requires HTTPS for live payment processing. Confirm your site is served over HTTPS before going live.
- WordPress admin access with the ability to install and activate plugins.
- Start in test mode. It is strongly recommended to complete your initial setup and testing using Stripe test mode before accepting any real customer payments with deposits.
Before creating real deposit holds, confirm that WooCommerce checkout and Stripe payments already work correctly on your store.
Install SecureHold WP
Once the prerequisites are confirmed, installation follows the standard WordPress plugin process.
- 1Download the SecureHold WP plugin package from your account or the distribution link provided after purchase.
- 2Log in to your WordPress admin dashboard.
- 3Go to Plugins, then Add New, then Upload Plugin.
- 4Select the SecureHold WP ZIP file and click Install Now.
- 5Activate SecureHold WP once the installation is complete.
- 6Open the SecureHold WP settings or setup page to begin configuration.
Connect or verify Stripe configuration
SecureHold WP works with your existing WooCommerce Stripe Gateway connection. You do not need to add separate API keys unless your setup requires it.
- Test mode vs live mode. Start in test mode. Stripe test mode uses a separate set of API keys and test card numbers. Deposits created in test mode do not affect real funds.
- API keys. Confirm that the WooCommerce Stripe Gateway has your correct publishable and secret keys for the mode you are testing in. Using test keys in live mode or live keys in test mode will cause failures.
- WooCommerce Stripe Gateway version. Ensure the gateway is up to date. Older versions may not support the PaymentIntent capture flow that SecureHold WP requires.
- Webhook endpoint. Stripe needs to deliver events to your store. Before going live, configure a Stripe webhook for WooCommerce security deposits and use SecureHold WP’s Health Check to help verify delivery.
- Avoid mixing test and live objects. Do not create orders in test mode, then switch to live keys. Stripe objects created in one mode are not accessible in the other.
Configure your first deposit rule
After activation and Stripe connection, configure how deposits are created for your orders. If you are still planning the workflow, start with the guide to add a security deposit to WooCommerce.
- Deposit amount. Set a global deposit amount (fixed value or percentage) that applies to all qualifying orders. This is the amount that will be held on the customer’s card at checkout.
- Hold creation trigger. Choose at which point in the order lifecycle the hold is created. Typically this is at checkout when the customer submits payment.
- Expected order status. Configure which WooCommerce order status should trigger or confirm deposit hold creation.
- Manual capture. By default, SecureHold WP requires you to manually capture the hold from the order admin. This gives you control over when funds are collected.
- Manual release. Release actions are also manual by default. You review the order and release the hold when appropriate.
- Pro plan product and category rules. If you are using the Pro plan, you can configure different deposit amounts per product or category, useful for stores with varied rental inventory or service types.
Run Health Check before your first test order
Before placing a test order, run the SecureHold WP Health Check. It reviews the most common configuration points that can silently cause deposit workflows to fail.
- 1Open the Health Check from the SecureHold WP admin page.
- 2Review Stripe status: API connection, mode (test or live) and key validity.
- 3Review WooCommerce status: gateway active, required settings in place.
- 4Check webhook configuration: endpoint URL, registered events and recent delivery status.
- 5Fix any warnings or errors before proceeding. Do not skip warnings and assume they will not cause issues in production.
Create your first test order
With Health Check passing, place a complete test order to verify the deposit workflow end-to-end. Use the dedicated checklist to test WooCommerce security deposits in Stripe test mode before accepting live orders.
- Use Stripe test mode. Use a Stripe test card number to place a real WooCommerce test order from the front end of your store.
- Verify the main order payment. Confirm that the order payment processes correctly and the order reaches the expected WooCommerce status.
- Verify the deposit hold. Check the WooCommerce order admin to confirm the deposit hold is active and shows the correct amount.
- Test capture. From the order admin, capture the deposit hold. Confirm that the captured amount appears in your Stripe test dashboard.
- Test release. Place a second test order and release the hold from the order admin. Confirm the hold disappears from both the Stripe dashboard and the order admin.
- Review order notes or logs. If SecureHold WP records deposit events in order notes, review them to confirm the expected actions were logged.
Do not test a new deposit workflow for the first time with a real customer order. Use Stripe test mode and confirm that capture and release behave as expected before accepting any live payments with deposits enabled.
What to do before going live
Before switching to live mode and accepting real customer orders with deposits, work through this checklist.
- Test mode successful. At least one full test order completed: checkout, deposit hold created, capture tested, release tested.
- Webhooks working. Health Check confirms the webhook endpoint is receiving and processing Stripe events correctly.
- Deposit amount correct. The configured deposit amount matches what your business model requires.
- Order admin actions verified. You have confirmed that capture and release work from the WooCommerce order screen in test mode.
- Customer communication reviewed. If your store communicates deposit details to customers in order emails, product descriptions or checkout text, review that messaging for accuracy before going live.
- Support process ready. Have a plan for handling customer questions about deposit holds, particularly for customers who are unfamiliar with pending charges on their bank statement.
Set up SecureHold WP with confidence
Use SecureHold WP Health Check and documentation to validate your WooCommerce security deposit workflow before going live.
FAQ
-
Do I need WooCommerce before installing SecureHold WP?
Yes. SecureHold WP is a WooCommerce extension. WooCommerce must be installed and activated on your site before you install SecureHold WP. It will not function without an active WooCommerce setup. -
Do I need Stripe to use SecureHold WP?
Yes. SecureHold WP creates Stripe authorization holds using your Stripe account and the WooCommerce Stripe Gateway. You need an active Stripe account and the WooCommerce Stripe Gateway installed and configured on your site. -
Should I test in Stripe test mode first?
Yes, always. Stripe test mode lets you place real test orders using test card numbers without processing actual payments. Test the full deposit workflow including capture and release before accepting any customer orders with deposits enabled. -
Where do I check if SecureHold WP is configured correctly?
Use the SecureHold WP Health Check. It reviews your Stripe connection, API keys, WooCommerce gateway status and webhook configuration, and surfaces any issues that could prevent deposit holds from working correctly. -
Can I configure deposits per product?
Yes, with the Pro plan. The Pro plan includes product and category rules that let you set different deposit amounts for different products or categories. The standard plan applies a single global deposit rule to all qualifying orders.

