Enable passwordless authentication for WordPress using WebAuthn/Passkeys. More secure, more convenient.

Mohamed Endisha

Secure Passkeys

Secure Passkeys is a powerful WordPress plugin that enables passwordless authentication using WebAuthn technology.

Marcus (aka @msykes)

Marcus

Pixelite

Login With Ajax – Fast Logins, 2FA, Redirects

Add beautiful login forms with smooth AJAX login/registration effects, 2FA support, custom redrection options and many more login-related features!

Anna Garcia

Beyond Identity Passwordless

A passwordless solution that allows users and admins to log into a WordPress website using passkeys with Beyond Identity.

Clayton LZ

<p><strong>Bye Bye Passwords</strong> brings modern passwordless authentication to WordPress using WebAuthn/Passkeys technology. Say goodbye to weak passwords and hello to secure, convenient login with biometrics, security keys, or platform authenticators.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Passwordless Login</strong> – Sign in using Touch ID, Face ID, Windows Hello, or security keys</li>
<li><strong>Multiple Passkeys</strong> – Register multiple devices for convenient access anywhere</li>
<li><strong>Recovery Codes</strong> – Generate one-time backup codes for emergency access</li>
<li><strong>Enhanced Security</strong> – Eliminate password-based attacks completely</li>
<li><strong>User-Friendly</strong> – Simple setup with no technical knowledge required</li>
<li><strong>Privacy-Focused</strong> – Your authentication data stays on your server</li>
<li><strong>WordPress Integration</strong> – Seamlessly integrated into WordPress admin and login</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Register a passkey from your WordPress admin profile</li>
<li>Use your device’s built-in authentication (fingerprint, face, PIN)</li>
<li>Sign in instantly without typing passwords</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>SSL/HTTPS enabled website (required for WebAuthn)</li>
<li>Modern browser with WebAuthn support</li>
<li>PHP 7.2 or higher</li>
<li>WordPress 5.0 or higher</li>
</ul>
<h3>External Services</h3>
<p>This plugin may connect to the FIDO Alliance Metadata Service (MDS) to download root certificates for authenticator validation.</p>
<h4>FIDO Alliance Metadata Service</h4>
<ul>
<li><strong>URL:</strong> https://mds.fidoalliance.org/</li>
<li><strong>Purpose:</strong> Downloads attestation root certificates to verify the authenticity of security keys and passkey devices</li>
<li><strong>When:</strong> Only when attestation verification is enabled and the plugin needs to update its certificate store (not during normal authentication)</li>
<li><strong>Data sent:</strong> No personal or user data is transmitted – only a standard HTTP GET request</li>
<li><strong>Service provider:</strong> FIDO Alliance</li>
<li><strong>Terms of Use:</strong> https://fidoalliance.org/metadata/</li>
<li><strong>Privacy Policy:</strong> https://fidoalliance.org/privacy-policy/</li>
</ul>
<p>No user data, credentials, or personal information is ever sent to external services. All authentication happens locally on your server.</p>


Alternatives to Bye Bye Passwords

Top alternatives