Skip to main content

Register. Get verified. Integrate.

#trstd Login makes your website’s authenticity verifiable to People. Integration is simple: once your website is verified you get your Integration ID. And off you go.

Variants for your website.

You can add #trstd Login standalone wherever your customers’ data matters – at the user account, the cart or the checkout. Style #trstd Login to fit your brand.

For online shops, Trustbadge AI+ and #trstd Login are available in the Trusted Shops Control Center, configurable and as a shop plugin for many shop systems.

Match #trstd Login to your design language.

Three steps to go live.

  1. 1Manage your themes

    Log in to the Control Center to create themes that match your design.

  2. 2Add #trstd Login to your website

    Paste the snippet below and replace the placeholder with your Integration ID.

  3. 3Place it where data matters

    Put #trstd Login in your utility navigation — near account, cart or checkout.

HTML
<!-- Place it in the header -->
<!-- Optional: improves Cumulative Layout Shift (CLS) metrics by reserving
     space for the login toggle before the script loads. -->
<style>
  trstd-login:not(:defined) {
    display: inline-flex;
    min-height: 34px;
    min-width: calc(34px * 38 / 24);
    visibility: hidden;
  }
</style>
<script type="module" src="https://cdn.trstd-login.trstd.com/trstd-login/script.js" data-intid="<Your Integration ID>" defer></script>

<!-- Place it where you want to show trstd login element -->
<trstd-login></trstd-login>

Content Security Policy (CSP)

You only need to extend your CSP if such rules are already active on your website. If you don’t use a Content Security Policy, nothing needs to change.

This policy permits both CDN domains for scripts, styles, images and fonts. 'unsafe-inline' applies only to style-src – required because Web Components inject <style> elements into shadow roots.

HTTP header (recommended)
Content-Security-Policy:
  default-src https://*.trustedshops.com https://*.trstd.com;
  img-src     https://*.trustedshops.com https://*.trstd.com data:;
  script-src  https://*.trustedshops.com https://*.trstd.com;
  font-src    https://*.trustedshops.com https://*.trstd.com;
  connect-src https://*.trustedshops.com https://*.trstd.com;
  style-src   https://*.trustedshops.com https://*.trstd.com 'unsafe-inline';
  frame-src   https://*.trustedshops.com https://*.trstd.com;
HTML <meta> tag (if HTTP headers are not configurable)
<meta http-equiv="Content-Security-Policy"
  content="default-src https://*.trustedshops.com https://*.trstd.com;
           img-src     https://*.trustedshops.com https://*.trstd.com data:;
           script-src  https://*.trustedshops.com https://*.trstd.com;
           font-src    https://*.trustedshops.com https://*.trstd.com;
           connect-src https://*.trustedshops.com https://*.trstd.com;
           style-src   https://*.trustedshops.com https://*.trstd.com 'unsafe-inline';
           frame-src   https://*.trustedshops.com https://*.trstd.com;">