Launching an eCommerce website is exciting --- and terrifying. There are hundreds of details that can go wrong, and in eCommerce, a single overlooked issue can cost you sales, customers, or even legal trouble. A broken checkout flow on launch day does not just lose one sale; it loses every sale until you notice and fix it.
This checklist distills the critical items into 25 actionable verification points. Work through them methodically before you flip the switch, and you will launch with confidence.
Security Foundations
1. SSL Certificate Installed and Forced
Every page of your store must load over HTTPS. Install a valid SSL certificate, configure your server to redirect all HTTP requests to HTTPS, and verify that no mixed content warnings appear (images, scripts, or stylesheets loading over HTTP).
Test by visiting your site and checking the padlock icon in the browser address bar. Click it to verify the certificate chain is complete.
2. Payment Gateway Configured and Tested
Whether you use Stripe, PayPal, Square, or another gateway, test the complete payment flow:
- Successful payment with a test card
- Declined card handling (does the user see a clear error message?)
- Refund process from your admin panel
- Webhook delivery (payment confirmations reaching your system)
- Currency formatting and decimal handling
Never launch with a payment gateway you have only tested in sandbox mode. Process at least one real transaction (even for $1) to verify the live integration works.
3. PCI DSS Compliance
If you handle credit card data directly (which you should avoid --- use Stripe Elements or similar tokenized solutions), you must comply with PCI DSS. Even when using hosted payment forms, you still need to complete a Self-Assessment Questionnaire (SAQ). Verify:
- No credit card numbers are logged anywhere in your system
- Payment form fields are served by the gateway, not your server
- Admin access to payment data is restricted and logged
4. Security Hardening
- Admin panel URL changed from default (
/adminor/wp-admin) - Strong passwords enforced for all admin accounts
- Two-factor authentication enabled for admin and staff accounts
- File upload restrictions in place (no executable file types)
- Rate limiting on login and checkout endpoints
- Database backups automated and tested
User Experience
5. Mobile Responsiveness
Over 60% of eCommerce traffic comes from mobile devices. Test your entire store on:
- Multiple screen sizes (small phone, large phone, tablet)
- Both iOS Safari and Android Chrome
- Touch interactions (buttons large enough to tap, no hover-dependent features)
- Mobile checkout flow (form fields, keyboard types, autofill support)
Use Chrome DevTools device emulation for initial testing, but always verify on real devices before launch.
6. Page Speed Optimization
Slow pages kill conversions. Every additional second of load time reduces conversion rates by approximately 7%. Verify:
- Homepage: Under 3 seconds on 4G mobile
- Product pages: Under 2.5 seconds
- Checkout: Under 2 seconds
Use Google PageSpeed Insights and aim for a score above 80 on mobile. Common fixes include image compression (use WebP format), lazy loading below-the-fold images, minifying CSS and JavaScript, and enabling browser caching.
7. Product Pages Complete
Every product page should include:
- Clear, high-quality product images (multiple angles, zoom capability)
- Detailed product description addressing customer questions
- Price displayed prominently (including any taxes or fees)
- Stock availability indicator
- Variant selection (size, color, material) working correctly
- Add-to-cart button that is impossible to miss
- Customer reviews section (even if empty at launch, have the structure ready)
- Related or recommended products
8. Search Functionality
If your store has more than 20 products, search is essential. Test:
- Search results relevance (does searching "blue shirt" return blue shirts?)
- Typo tolerance (does "bleu shirt" still work?)
- Empty state handling (what does the user see when no results match?)
- Filter and sort options on search results pages
- Search suggestions or autocomplete
9. Cart Functionality
- Adding items updates the cart icon/counter immediately
- Changing quantities recalculates totals correctly
- Removing items works smoothly
- Cart persists across sessions (stored in database or local storage, not just server session)
- Cart shows product thumbnails, names, quantities, individual prices, and total
- Discount codes apply correctly and show the discount amount
10. Checkout Flow
The checkout is where money changes hands. Test it exhaustively:
- Guest checkout available (do not force account creation)
- Address form validates properly (required fields, postal code format)
- Shipping options display correctly with accurate costs
- Tax calculation is correct for different regions
- Order summary visible throughout the checkout process
- Form fields have appropriate input types (
type="email",type="tel",inputmode="numeric"for card fields) - Autofill works for returning customers
- Error messages are specific and helpful ("Please enter a valid postal code" not "Error in field 5")
SEO and Marketing
11. SEO Fundamentals
- Unique title tags and meta descriptions for every page
- Proper heading hierarchy (one H1 per page, followed by H2s and H3s)
- Clean URL structure (
/product-namenot/product?id=47382) - Image alt tags on all product images
- Canonical tags to prevent duplicate content issues (especially for products with variants)
- XML sitemap generated and submitted to Google Search Console
robots.txtconfigured (block admin panels, cart pages, and checkout from indexing)
12. Structured Data (Schema Markup)
Implement Product schema markup to enable rich results in Google search:
{
"@context": "https://schema.org",
"@type": "Product",
"name": "Premium Wireless Headphones",
"image": "https://store.com/images/headphones.webp",
"description": "Noise-cancelling wireless headphones with 30-hour battery life.",
"brand": {
"@type": "Brand",
"name": "AudioTech"
},
"offers": {
"@type": "Offer",
"price": "149.99",
"priceCurrency": "EUR",
"availability": "https://schema.org/InStock"
},
"aggregateRating": {
"@type": "AggregateRating",
"ratingValue": "4.6",
"reviewCount": "127"
}
}
Validate your markup using Google's Rich Results Test tool.
13. Analytics Installed
- Google Analytics 4 (or your preferred analytics platform) tracking all pages
- Enhanced eCommerce tracking configured (product views, add-to-cart events, checkout steps, purchases)
- Conversion tracking set up for completed purchases
- Google Search Console verified and connected
14. Cart Abandonment Strategy
Over 70% of online shopping carts are abandoned. Have a recovery strategy in place:
- Abandoned cart email sequence (first email within 1 hour, follow-up at 24 hours, final reminder at 72 hours)
- Exit-intent popup offering a discount or free shipping
- Retargeting pixels installed (Meta Pixel, Google Ads remarketing tag)
15. Email Marketing Integration
- Transactional emails configured and tested (order confirmation, shipping notification, delivery confirmation)
- Welcome email triggered on account creation
- Newsletter signup form on the site
- Email list segmented by customer behavior (purchased, abandoned cart, browsing only)
Operations
16. Shipping Configuration
- Shipping rates accurate for all regions you serve
- Free shipping thresholds working correctly
- Shipping estimation on product and cart pages
- Carrier integration tested (real-time rates if applicable)
- International shipping restrictions in place (countries you do not ship to)
- Handling time clearly communicated
17. Inventory Management
- Stock levels accurate and synced across channels (if selling on multiple platforms)
- Out-of-stock behavior defined (hide product, show "notify me" button, or display "out of stock")
- Low stock alerts configured for your team
- Oversell prevention (what happens if two people buy the last item simultaneously?)
18. Order Management
- Order confirmation emails sending correctly with accurate details
- Order status updates (processing, shipped, delivered) triggering appropriate notifications
- Admin notification on new orders
- Order export capability (CSV or API) for accounting software
- Returns and refund workflow documented and functional
19. Tax Configuration
- Tax rates correct for your jurisdiction
- Tax displayed clearly (included in price or added at checkout, depending on regional requirements)
- Tax exemption handling for B2B customers (if applicable)
- Digital goods tax rules applied correctly (EU VAT rules for digital products differ from physical goods)
Legal and Compliance
20. Privacy Policy
A legally compliant privacy policy must be present and linked from the footer of every page. It should cover:
- What data you collect and why
- How you use customer data
- Third parties who receive data (payment processors, shipping carriers, analytics)
- Cookie usage and consent
- Data retention periods
- How customers can request data deletion
21. Terms and Conditions
Your terms should cover:
- Return and refund policy (legally required in the EU: 14-day withdrawal right for online purchases)
- Shipping policy and delivery timeframes
- Limitation of liability
- Intellectual property rights
- Dispute resolution process
22. Cookie Consent
GDPR and ePrivacy Directive require explicit consent before setting non-essential cookies. Implement a cookie consent banner that:
- Blocks analytics and marketing cookies until consent is given
- Provides granular control (accept all, reject all, or customize categories)
- Stores consent records for compliance documentation
- Does not use dark patterns (the reject button must be as prominent as the accept button)
Technical Infrastructure
23. Backup Strategy
- Full daily backups of files and database
- Backups stored in a separate location from the live server
- Backup restoration tested (can you actually restore from a backup?)
- Point-in-time recovery capability for the database
24. Monitoring and Alerts
- Uptime monitoring with instant alerts (UptimeRobot, Pingdom, or similar)
- Error tracking (Sentry, Bugsnag, or server error logs)
- Performance monitoring (response time trends)
- SSL certificate expiry monitoring
- Payment gateway status monitoring
25. Load Testing
Before launch, simulate expected traffic to ensure your infrastructure can handle it:
# Simple load test with k6
k6 run --vus 50 --duration 5m load-test.js
# Or with Apache Bench for quick checks
ab -n 1000 -c 50 https://yourstore.com/
Test at 2-3x your expected peak traffic. If you are planning a marketing campaign or expect a launch-day spike, test at 5-10x normal levels.
Pre-Launch Final Checks
Before going live, run through these final verifications:
- [ ] Place a test order through every payment method you accept
- [ ] Verify order confirmation email arrives with correct details
- [ ] Test on at least three different browsers (Chrome, Safari, Firefox)
- [ ] Test on at least two real mobile devices
- [ ] Check all links in navigation, footer, and product pages
- [ ] Verify 404 page displays correctly and helps users navigate back
- [ ] Confirm favicon and social sharing images (Open Graph tags) are set
- [ ] Review all placeholder text ("Lorem ipsum") is replaced with real content
- [ ] Check that no test products or test categories are visible to customers
- [ ] Verify DNS is pointing to the correct server
Conclusion
This checklist is comprehensive, but it is not exhaustive. Every eCommerce business has unique requirements based on its products, market, and regulations. Use this as your foundation and add items specific to your situation.
The businesses that launch successfully are not the ones that rush to go live. They are the ones that systematically verify every critical path before a single real customer touches the site.
At AxonITech, we build and launch eCommerce websites with this level of rigor. From platform selection and development to payment integration and SEO setup, our team ensures your store is ready for real customers on day one.