Skip to main content

Register. Get verified. Integrate.

#trstd Login makes your website’s authenticity verifiable to People. Integration is simple: once your website is verified you get your Integration ID. And off you go.

Variants for your website.

You can add #trstd Login standalone wherever your customers’ data matters – at the user account, the cart or the checkout. Style #trstd Login to fit your brand.

For online shops, Trustbadge AI+ and #trstd Login are available in the Trusted Shops Control Center, configurable and as a shop plugin for many shop systems.

Standalone

Three steps to go live.

  1. 1Manage your themes

    Log in to the Control Center to create themes that match your design.

  2. 2Add #trstd Login to your website

    Paste the snippet below and replace the placeholder with your Integration ID.

  3. 3Place it where data matters

    Put #trstd Login in your utility navigation — near account, cart or checkout.

HTML
<!-- Place it in the header -->
<!-- Optional: improves Cumulative Layout Shift (CLS) metrics by reserving
     space for the login toggle before the script loads. -->
<style>
  trstd-login:not(:defined) {
    display: inline-flex;
    min-height: 34px;
    min-width: calc(34px * 38 / 24);
    visibility: hidden;
  }
</style>
<script type="module" src="https://cdn.trstd-login.trstd.com/trstd-login/script.js" data-intid="<Your Integration ID>" defer></script>

<!-- Place it where you want to show trstd login element -->
<trstd-login></trstd-login>

Content Security Policy (CSP)

You only need to extend your CSP if such rules are already active on your website. If you don’t use a Content Security Policy, nothing needs to change.

This policy permits both CDN domains for scripts, styles, images and fonts. 'unsafe-inline' applies only to style-src – required because Web Components inject <style> elements into shadow roots.

HTTP header (recommended)
Content-Security-Policy:
  default-src https://*.trustedshops.com https://*.trstd.com;
  img-src     https://*.trustedshops.com https://*.trstd.com data:;
  script-src  https://*.trustedshops.com https://*.trstd.com;
  font-src    https://*.trustedshops.com https://*.trstd.com;
  connect-src https://*.trustedshops.com https://*.trstd.com;
  style-src   https://*.trustedshops.com https://*.trstd.com 'unsafe-inline';
  frame-src   https://*.trustedshops.com https://*.trstd.com;
HTML <meta> tag (if HTTP headers are not configurable)
<meta http-equiv="Content-Security-Policy"
  content="default-src https://*.trustedshops.com https://*.trstd.com;
           img-src     https://*.trustedshops.com https://*.trstd.com data:;
           script-src  https://*.trustedshops.com https://*.trstd.com;
           font-src    https://*.trustedshops.com https://*.trstd.com;
           connect-src https://*.trustedshops.com https://*.trstd.com;
           style-src   https://*.trustedshops.com https://*.trstd.com 'unsafe-inline';
           frame-src   https://*.trustedshops.com https://*.trstd.com;">