{"id":17,"date":"2026-09-18T16:19:42","date_gmt":"2026-09-18T06:19:42","guid":{"rendered":"https:\/\/beauii.com.au\/blog\/?p=17"},"modified":"2026-09-18T16:19:42","modified_gmt":"2026-09-18T06:19:42","slug":"checkout-lock","status":"publish","type":"post","link":"https:\/\/beauii.com.au\/blog\/2026\/09\/18\/checkout-lock\/","title":{"rendered":"Checkout Lock: stop bots buying your locked products"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Hiding the buy button was never the whole job<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you run limited drops, presales, wholesale catalogues, or professional-only products, you already know the drill: you password-protect the product so only the right people can buy it. Locket has always made that part easy \u2014 lock any product, collection, vendor, or tag, and the buy button disappears until the customer enters the code.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But here&#8217;s the uncomfortable truth about&nbsp;<em>every<\/em>&nbsp;tool that just hides a button: the button is only hidden in the browser. A determined bot, a stock-alert service, or anyone who&#8217;s been forwarded a checkout link doesn&#8217;t click your buttons at all. They go straight to the cart and the checkout \u2014 and sail right past the lock.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We saw this happen to real merchants. One store running hyped trading-card pre-orders watched locked products get scooped up by bots the moment they went live, no password required. The lock&nbsp;<em>looked<\/em>&nbsp;right. It just wasn&#8217;t being enforced where it mattered.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Introducing Checkout Lock<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Checkout Lock closes the gap.<\/strong>&nbsp;Instead of only hiding the buy button, it enforces your password at the checkout itself \u2014 on Shopify&#8217;s own servers, not in the shopper&#8217;s browser. If a locked product reaches the checkout without a valid code, the order is stopped. No bypass. No exceptions.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>The button is a courtesy. The checkout is the lock.<\/strong>&nbsp;Bots can skip the first. They can&#8217;t skip the second.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">How it works, in plain English<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>A customer enters your password on the locked product, exactly as before.<\/li>\n\n\n\n<li>Behind the scenes, Locket hands them a secure,\u00a0<strong>cryptographically signed pass<\/strong>\u00a0that says &#8220;this shopper unlocked this product.&#8221; It can&#8217;t be faked, copied onto another product, or reused by a bot.<\/li>\n\n\n\n<li>At checkout, Shopify checks the pass. Valid pass \u2192 the order goes through. Missing or invalid pass \u2192 checkout is blocked with a clear message:\u00a0<em>&#8220;Enter the access code for this product before checking out.&#8221;<\/em><\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Your customers won&#8217;t notice anything new \u2014 they enter the password and buy, just like today. The difference is entirely on the side of the people who&nbsp;<em>shouldn&#8217;t<\/em>&nbsp;be getting through.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who needs this<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Checkout Lock earns its place the moment a locked product is something people actively want to get around. That&#8217;s more businesses than you&#8217;d think:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Limited drops &amp; hype releases<\/strong>\u00a0\u2014 sneakers, streetwear, collectibles. If it sells out in seconds, bots are already trying.<\/li>\n\n\n\n<li><strong>Trading cards &amp; pre-orders<\/strong>\u00a0\u2014 high-demand presales where a handful of bots can clear your entire allocation.<\/li>\n\n\n\n<li><strong>Wholesale &amp; B2B pricing<\/strong>\u00a0\u2014 keep trade prices and trade ordering to approved accounts, not the whole internet.<\/li>\n\n\n\n<li><strong>Professional-only &amp; consultation products<\/strong>\u00a0\u2014 ranges that are meant to be sold with advice, not grabbed by anyone with the link.<\/li>\n\n\n\n<li><strong>VIP &amp; members-only merch<\/strong>\u00a0\u2014 reward the people who earned access, and make sure it stays that way.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">The part everyone assumes is impossible<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Enforcing rules at Shopify&#8217;s checkout has traditionally been a&nbsp;<strong>Shopify Plus<\/strong>&nbsp;privilege \u2014 the kind of thing on a $2,300\/month plan. Checkout Lock works on&nbsp;<strong>any Shopify plan<\/strong>, including Basic and Grow. No Plus. No developer. No theme surgery. You install Locket, flip one switch, and it&#8217;s on.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Turning it on<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Checkout Lock is a&nbsp;<strong>Locket Pro<\/strong>&nbsp;feature, and it&#8217;s opt-in \u2014 it only ever applies to stores that switch it on, so nothing changes for anyone else. To enable it:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open Locket in your Shopify admin and go to\u00a0<strong>Settings \u2192 Checkout Lock<\/strong>.<\/li>\n\n\n\n<li>Click\u00a0<strong>Enable<\/strong>. Locket sets everything up automatically \u2014 there&#8217;s no checkout code to write and no rules to configure by hand.<\/li>\n\n\n\n<li>That&#8217;s it. Your existing locks are now enforced at checkout as well as on the product page.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Client-side hiding stays exactly as it was \u2014 Checkout Lock is a second, deeper layer underneath it. Together they cover both the shopper who sees your store and the bot that never does.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Lock it like you mean it<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If your locked products are worth protecting, they&#8217;re worth protecting properly. Checkout Lock takes the password you already trust and makes it something bots, scripts, and leaked links simply cannot get around.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ready to switch it on?<\/strong>&nbsp;Open Locket \u2192 Settings \u2192 Checkout Lock, or&nbsp;<a href=\"https:\/\/beauii.com.au\/Locket\/\">learn more about Locket here<\/a>. Not using Locket yet?&nbsp;<a href=\"https:\/\/apps.shopify.com\/locket\">Find it on the Shopify App Store<\/a>&nbsp;and lock your first product in a couple of minutes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hiding the buy button was never the whole job If you run limited drops, presales, wholesale catalogues, or professional-only products, you already know the drill: you password-protect the product so only the right people can buy it. Locket has always made that part easy \u2014 lock any product, collection, vendor, or tag, and the buy [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":18,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-17","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-locket"],"_links":{"self":[{"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/posts\/17","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/comments?post=17"}],"version-history":[{"count":1,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/posts\/17\/revisions"}],"predecessor-version":[{"id":19,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/posts\/17\/revisions\/19"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/media\/18"}],"wp:attachment":[{"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/media?parent=17"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/categories?post=17"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/beauii.com.au\/blog\/wp-json\/wp\/v2\/tags?post=17"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}