Everything people ask before buying.
If your question isn't here, send it over — we answer within a working day and add the good ones to this page.
Getting started
What exactly is Attestra?
A WordPress plugin that turns your site into a credential authority. You issue certificates, licences or compliance records from the admin, and anyone can confirm they're genuine through a public lookup page on your own domain.
What do I need to run it?
WordPress 6.4 or newer, PHP 7.4+, and a site you can install plugins on. That's it. There's no external service to sign up for and nothing to configure at the server level.
Will it work with my theme and page builder?
Yes. Attestra outputs standard blocks and shortcodes, so it renders inside any theme. The verification page inherits your existing styles rather than forcing its own.
How long does setup take?
Most people publish their first real credential inside an afternoon. Installing and activating takes about two minutes; the time goes into deciding what fields your credential should carry. See the four steps.
Credentials and verification
Can recipients verify a certificate without an account?
That's the whole point. They scan the QR code or type the credential ID into your lookup page and get the status straight away — no sign-up anywhere, for them or for you.
What does a verification actually check?
Four things in order: the record exists, the issuer signature matches, it hasn't been revoked, and today falls inside the validity window. The result is a clear verdict, not a raw data dump.
Can I revoke a credential after issuing it?
Yes, with a reason you write. The record stays verifiable but reports as revoked, so anyone checking gets the truth rather than a dead link.
What happens when a credential expires?
It flips to Expired automatically on the date you set. You choose per category whether expired records stay publicly visible as proof of history or drop out of search.
Can I edit a record after it's published?
Yes, and the change is logged with a timestamp. Amendment history is part of the record, which is what makes it hold up when an auditor asks.
Data and hosting
Where is the credential data stored?
In your own WordPress database, on your own hosting. There's no external service holding your records, and nothing breaks if you change hosts.
Does Attestra send my data anywhere?
The only outbound call is a licence check against our server, which sends your site domain and licence key — never credential data. See the privacy policy.
What happens if I deactivate the plugin?
Your records stay in the database untouched. Public verification pages stop resolving while it's inactive, and come straight back when you reactivate.
Can I export everything?
Yes. Export any category to CSV at any time, and the PDFs are yours to keep. We'd rather you stayed because it works, not because leaving is painful.
Licensing and billing
Does my site keep working when the licence expires?
Yes. Attestra stays installed and every published credential stays verifiable. What stops is access to new updates and support, so renewing keeps you on the latest version.
Can I move a licence between sites?
Yes. Deactivate the key on the old site from your account area and it frees up a slot immediately for the new one.
Do staging sites use up a licence slot?
No. Common staging patterns — staging., dev., .local and similar — are recognised and don't consume a slot.
How do refunds work?
Fourteen days, any reason, no questions. Read the refund policy for how to ask.
Support and development
How do I get help?
Email support is included on every plan, with priority queues on Studio and above. Most questions are answered within one working day. Contact support.
How often do you ship updates?
Every few months for features, and immediately for anything security-related. The changelog lists every release since January 2022.
Can you build a feature we need?
On Enterprise, yes — custom development is part of the arrangement. Tell us what you need.
Still deciding? Try it.
Seven days of full access answers more questions than any FAQ page can.