This guide explains how to embed the FilPass Custom Verifier on your website using the official verifier script and component. Once embedded, visitors can verify FilPass-issued documents directly from your site.
Prerequisites
Before you start, ensure:
- Your domain is approved and verified by FilPass.
- You have received an access token from FilPass.
- You can edit your website’s HTML files or CMS content.
- Your website is served over HTTPS.
Normal Website Implementation (HTML / Custom Site)
Use this method if your site is built with plain HTML, a custom framework, or server-rendered pages.
Steps
- Open the HTML file or template where the FilPass verifier should appear.
- Add the FilPass verifier script before the closing
</body> tag. - Insert the
<filpass-verifier> component at the location on the page where the verifier should be displayed. - Ensure the
accessToken used on your website matches exactly the value provided in the email from FilPass Client Support. - Save your changes and deploy the updated website.
Note:
- The custom verifier script and
accessToken are provided via email by FilPass Team. Do not reuse tokens from other environments or accounts. - Adjust the
width value as needed (for example, 100% for full width).
CMS Implementation
Use this method if your CMS allows custom HTML and script tags.
Steps
- Open the page or editor where the verifier will be embedded.
- Insert a Custom HTML / Embed / Code block.
- Paste the same verifier script and component used in the normal HTML implementation.
- Save and publish the page.
CMS Compatibility Notes
- Compatible with CMS platforms that allow custom scripts (e.g., WordPress Custom HTML blocks, Webflow embeds).
- Not compatible with Wix and Joomla due to platform script restrictions.
Testing the Verifier
- Load the page on your website.
- Confirm that the FilPass verifier loads correctly.
- Test verification using a valid document or QR code issued through FilPass.
- Ensure the domain used is the approved domain registered with FilPass.
Security and Best Practices
- Do not expose sensitive credentials other than the required access token.
- Embed the verifier only on approved domains.
- Always use HTTPS.
- Do not modify the verifier script source.
Need Assistance?
If you need help, contact support and include:
- Your website URL
- A screenshot of the issue
- The access token used