*Settings › Store*

# Account Settings

How customers get an account, what the Create account form asks for, what My Account shows, how sign-in is protected, members-only pages, customer roles and WordPress. First the guided page card by card, then every setting as one list. 12 sections.

Quick links

- [The page at a glance](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#overview)
- [How customers get an account](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#get-an-account)
- [Create account form](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#create-account-form)
- [My Account](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#my-account-card)
- [Sign-in protection](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#sign-in-protection)
- [Members-only pages](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#members-only)
- [Customer roles](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#roles-card)
- [Store accounts and WordPress](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#wordpress-card)
- [Registration](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#registration)
- [Account page](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#account-page)
- [Spam protection](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#spam-protection)
- [Limit Access](https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/#limit-access)

**Where to find it:** WP Admin › EasyCart › Settings › Store › Accounts

*The page*

## Accounts, card by card

What the page says about your customers, then each card in the order it shows them, with what customers see beside it.

### The page at a glance

How customers sign up and sign in, and what they can do from My Account

Settings › Store › Accounts opens as a guided page. The top line says whether customers can buy as guests and how many of the things you sell need an account, then how many customers have one and how many joined in the last 30 days. **Customer roles** and **Customers** at the top open those lists. **Worth a look** appears when something needs you: every members-only page paused open, a members-only page with a problem, accounts that never confirmed their email ( with **Send the email again** ), subscribers who cannot manage their subscription, or reCAPTCHA switched off because its keys changed.

![Settings › Store › Accounts: the summary, How customers get an account and the Create account form.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-overview-607.jpg)

### How customers get an account

Guests, and when new customers choose a password

**Can customers buy without an account?** **Yes, as guests**, or **No, every order makes an account**. Whatever you pick, some things always need an account, and the card lists the ones you sell, such as a members-only product or a subscription: the customer needs somewhere to come back to.

**When do new customers choose a password?** **Before paying** or **After paying**. Beside it, the steps a new customer goes through for something that needs an account, such as Email, Choose a password, Address, Pay. A guest buying anything else skips the account and finds the order later with Find your order ( order number and email ).

![How customers get an account: guests or not, the products that always need an account, and the steps a new customer goes through.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-get-an-account-607.jpg)

### Create account form

Click a part to add or remove it

The Create account form, drawn beside the parts it can ask for. Name, email and password are always there; click **Billing address**, **Notes box**, **Newsletter box** or **Terms box** to add or remove it. Checkout’s Create account follows the same form.

**New accounts confirm their email first**: new customers get a link and cannot sign in or buy until they click it; the card counts the accounts still waiting. **Email me when someone makes an account** sends a note to your store’s notification addresses.

![Create account form: the form beside the parts it asks for.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-create-account-form-607.jpg)

### My Account

What a signed-in customer sees

What a signed-in customer sees: the menu ( Dashboard, Orders, Subscriptions, Payment methods, the addresses, Basic information, Change password ) beside a sample dashboard. **Customers manage their subscriptions and saved cards** adds Subscriptions and Payment methods once you sell a subscription. **Print receipt button** puts one on each order. Some pages appear by themselves when there is something to show: Downloads, Pages you can open ( for members-only pages ) and Find your order for guests. A link opens the notes customers see on every order ( Notes for buyers ).

![My Account: the menu and a sample dashboard, beside the two switches.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-my-account-607.jpg)

### Sign-in protection

Which check guards which form

Which check guards which form. **Sign in, Create account, Forgotten password** use Google reCAPTCHA v2. **Set it up** opens three steps: add your site key and secret key ( a v2 “I’m not a robot” key that lists this site’s domain ), **Test the keys** by ticking the box, then switch it on, for these forms and, if you like, **Checkout’s sign-in and details forms too**. The switch only turns on once the keys pass, so keys that do not work never lock customers out.

Two more lines show what else guards accounts: checkout protection, which stops card testing ( with its level and **Open** ), and the limit on “Is there an account for this email?”: checkout answers a few new emails a visit, so nobody can list your customers.

![Sign-in protection with Set it up open: add your keys, test them, switch it on.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-sign-in-protection-607.jpg)

### Members-only pages

Pages only some customers can open

The pages only some customers can open ( Limit Access ), each with who gets in and whether its rule is on. **Limit a page** adds one. **Pause every rule** opens every limited page to everyone while you troubleshoot, and keeps your rules. **See every limited page** opens Users › Limit Access.

![Members-only pages: two limited pages, Limit a page and Pause every rule.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-members-only-pages-607.jpg)

### Customer roles

Groups of customers you treat differently

Your customer roles, with how many customers have each, and the one new accounts start in. A role can change prices, who can shop, members-only pages and offers. **Edit roles** opens the roles list. Roles need PRO.

![Customer roles: each role with its count, and what a role can change.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-customer-roles-607.jpg)

### Store accounts and WordPress

Store sign-ins, WordPress User Sync and personal data

Customers sign in to your store, not to WordPress: their account holds orders, addresses and subscriptions. When customers also use your WordPress site, such as a forum or courses, **WordPress User Sync** ( Premium ) gives them one sign-in for both. When a customer asks for their data, or to be forgotten, WordPress’s Export Personal Data and Erase Personal Data include their store account and orders.

![Store accounts and WordPress: WordPress User Sync and the personal data tools.](https://docs.wpeasycart.com/wp-content/uploads/2026/11/account-settings-wordpress-607.jpg)

*As one list*

## Getting an account

**Accounts, as one list**, under All settings at the foot of the page, shows every setting in its section: what a shopper is asked for when they register, and what they can look after once signed in.

### Registration

What a shopper must do to create an account

**Require terms agreement** ( default: Off )

Adds a checkbox to the registration form that shoppers have to tick before an account is created. If you operate anywhere covered by GDPR or CCPA you need a recorded, affirmative agreement rather than a line of small print, and this is what produces it. The linked pages are the ones you set under Checkout settings, so those apply here too.

**Require a billing address** ( default: Off )

Shoppers give a billing address when they register rather than waiting until checkout. It front-loads effort onto the sign-up form, which costs you some registrations, so it is only worth it if you genuinely need the address before an order exists. Trade and wholesale stores that vet accounts usually do; ordinary retail stores usually do not.

**Require email confirmation** ( default: Off )

New accounts stay inactive until the shopper clicks a link in an activation email. It stops junk sign-ups and, more usefully, proves the address works before you start sending order emails to it. The cost is a step where some genuine shoppers drop out, particularly if the email lands in spam, so it pairs badly with unconfigured email deliverability.

**Notes field on registration** ( default: Off; advanced setting )

Adds a free-text notes box to the registration form, and whatever the shopper writes appears on their customer record for staff to read. Useful on trade stores where new accounts explain who they are or quote a reference. On a retail store it is mostly an invitation to type something nobody will read.

**“Subscribe to newsletter” checkbox** ( default: Off )

Shows a newsletter opt-in checkbox on both the registration form and at checkout, and anyone who ticks it appears under Users, Subscribers. This is the cheapest list-building you will do, since it asks at the exact moment someone has decided to trust you. Leave the box unticked by default, which is both the legal position in most places and the one that produces a list worth having.

> **💡 Note:** The terms and privacy pages the agreement checkbox links to are set once, under [Settings › Cart & Checkout › Checkout](https://docs.wpeasycart.com/docs/administrative-console-guide/checkout-settings/), and used by both the registration form and checkout. Point them at real pages before you require agreement anywhere. Settings › Checkout can draft your terms, privacy and returns pages from your store’s own answers, as drafts for you to read and publish.

### Account page

What a signed-in shopper can manage

**Let shoppers manage their subscriptions and payment methods** ( default: Off )

Adds Subscriptions and Payment methods to the account menu. Shoppers with a Stripe subscription can change plans, cancel, and on Payment methods see each saved card and what it pays for, add a card, pick their default and remove cards that are unused or expired. Worth turning on the moment you sell anything recurring: self-service cancellation feels like a loss, but the alternative is a support ticket, a chargeback, or both. It also lets customers fix a failing card before a renewal collapses.

**Renewals use the first order’s addresses** ( default: Off; advanced setting )

Makes subscription renewals copy the billing and shipping addresses from the original order instead of the customer’s current account details. Leave it off for most stores, so a customer who moves only has to update their account once. Turn it on when the first order’s addresses are the ones that must stick, such as a gift subscription shipped to someone else.

> **💡 Note:** Customers manage their own subscriptions, addresses and cards from the account page. For a step by step walkthrough, see [How to Let Customers Manage Their Account](https://docs.wpeasycart.com/docs/how-to-guides/how-to-let-customers-manage-their-account/).

*As one list*

## Spam protection

Google reCAPTCHA on the account forms, and how far to extend it.

### Spam protection

Google reCAPTCHA v2 on the account and checkout forms

**Site key** ( default: Empty )

The public half of the key pair, from your Google reCAPTCHA admin console. It must be a v2 “I’m not a robot” key, and the key’s domain list in Google must include this site, so a key made for your live domain fails on a staging copy and the other way round. Save it with the secret key, then test them.

**Secret key** ( default: Empty )

The private half of the pair. It is only ever sent from your server to Google, never to the shopper’s browser, so keep it out of screenshots and support emails. If you think it has leaked, generate a new pair in the Google console, replace both keys here and test them again.

**Google reCAPTCHA v2** ( default: Off )

Adds a Google reCAPTCHA v2 challenge to registration and login. This is the blunt instrument for account spam and it does work, but it puts a puzzle in front of real customers too. It only switches on once your saved keys have passed the test above, so a wrong key can never lock shoppers out of signing in. Change a key later and the challenge comes off your forms until the new keys pass. The test belongs to the keys, not to the site address, so a copy of your site on another domain, such as staging, keeps the challenge on: list that domain on the key in Google too, or switch reCAPTCHA off on the copy. Note the inquiry form on product pages is protected separately, by checks that are invisible to shoppers, so you may not need this as well.

**Also protect checkout** ( default: Off )

Extends the challenge to the login and details forms inside checkout. Think carefully before turning this on: the last step before payment is the most expensive place in your store to put an obstacle, and a reCAPTCHA that misfires there costs you the sale rather than a sign-up. To stop bots testing stolen cards at checkout, use Checkout protection instead: it only asks for a check when something looks wrong.

> **💡 Note:** Between the keys and the switch sits *Test your keys*. Save both keys first, because the test uses the saved ones, then press *Test keys*: a reCAPTCHA box appears, you tick it, and Google checks the answer with your secret key. The row then says the keys passed and on what date. When they fail it says why: the secret key is not recognised, the two keys come from different reCAPTCHA sites, or they are v3 keys, which WP EasyCart does not use. If the box itself shows an error, the site key is wrong, is not a v2 key or does not list this site’s domain. Card-testing bots at checkout are handled by [Settings › Cart & Checkout › Checkout protection](https://docs.wpeasycart.com/docs/administrative-console-guide/checkout-protection/), which can use these same keys for its human check.

*As one list*

## Limit Access

One switch that opens every limited page while you troubleshoot your rules.

### Limit Access

Pages kept for members: customers who bought a product or subscription, customers with a role, or any signed-in customer

**Pause every Limit Access rule** ( default: Off )

Opens every limited page to everyone until you switch it off again. Use it when you are troubleshooting Limit Access: your rules are kept, and nothing about them changes while it is on. Remember to switch it off, or your members-only pages stay open to everyone.

*Keep going*

## Related panels

- [Checkout](https://docs.wpeasycart.com/docs/administrative-console-guide/checkout-settings/): Guest checkout, the terms links, and what the checkout form asks for.
- [User Accounts](https://docs.wpeasycart.com/docs/administrative-console-guide/user-accounts/): Managing the customer records these settings create.
- [User Roles](https://docs.wpeasycart.com/docs/administrative-console-guide/user-roles/): Roles, which decide what an account can see and what it pays.
- [Products](https://docs.wpeasycart.com/docs/administrative-console-guide/product-settings/): Restricting the whole store to signed-in shoppers by role.
- [Email](https://docs.wpeasycart.com/docs/administrative-console-guide/email-settings/): The sender and deliverability behind activation and account emails.
- [Subscriptions](https://docs.wpeasycart.com/docs/administrative-console-guide/subscriptions-2/): The subscriptions shoppers manage from their account page.
- [Checkout protection](https://docs.wpeasycart.com/docs/administrative-console-guide/checkout-protection/): Card-testing protection at checkout, which can use the reCAPTCHA keys.

## Ready to run your store on WP EasyCart?

Everything in this guide works with the free plugin. PRO and Premium add subscriptions, memberships, wholesale pricing and more. Try every PRO feature free for 14 days.

[Start your free trial](https://www.wpeasycart.com/wp-easycart-professional-14-no-risk-trial/) · [See what is included](https://www.wpeasycart.com/wordpress-shopping-cart-pricing/)

![The WP EasyCart admin: orders and offers](https://docs.wpeasycart.com/wp-content/uploads/2026/09/cta-wpeasycart-pro-v2.jpg)

---

Source: https://docs.wpeasycart.com/docs/administrative-console-guide/account-settings/ ( updated 2026-11-06 )