Secure biometric login (WebAuthn / FIDO2 / Passkeys) for WordPress and WooCommerce using Face ID, Touch ID, or fingerprint.

fingerlogin

netpresence

Fingerlogin

Fingerlogin enable Fingerprint biometric login authentication to sign into websites and services.

intercede01

RapID Secure Login

RapID Secure Login (RapID-SL) is a simple and convenient authentication plugin.

superauth

SuperAuth Passwordless Sign In & Alert Service

SuperAuth provides passwordless sign in, alert service, sign out from all devices, lock or unlock user account from any computer, smartphone, tablet,  …

miniOrange

miniorange

WebAuthn – Passwordless login using Fingerprint, FaceID, Touch ID, Yubikey

WebAuthn is a new way of authenticating your user on the website. WebAuthn by the…

Hossein

Authentry – Face ID, Fingerprint & Passkey Login

Passwordless passkey login for WordPress using Face ID, fingerprint, Touch ID, and Windows Hello.

Kakshak Kalaria

Adarsh Verma

Concatstring Solutions

Sumit Tejani

Hardik Patel

Vrutika Darji

<p><strong>CS BioLogin</strong> adds passwordless sign-in to WordPress using the WebAuthn standard (FIDO2 / passkeys). Visitors can authenticate with Face ID, Touch ID, Windows Hello, or a platform fingerprint reader. Biometric templates never leave the user’s device; only public key credentials are stored in your WordPress database.</p>
<h4>What this plugin does</h4>
<ul>
<li>Adds a <strong>Sign in with Biometrics</strong> option on the WordPress login screen (with optional password fallback).</li>
<li>Lets logged-in users <strong>register, rename, update, and remove</strong> passkeys from their profile, a front-end shortcode page, or WooCommerce My Account.</li>
<li>Provides an admin screen for <strong>settings, security logs, and per-user device management</strong>.</li>
<li>Applies <strong>rate limiting and lockout</strong> on authentication attempts.</li>
</ul>
<h4>What this plugin does NOT do</h4>
<ul>
<li>It does <strong>not</strong> send user data, credentials, or biometrics to third-party servers. All verification runs on your site over HTTPS.</li>
<li>It does <strong>not</strong> store fingerprint or face images—only WebAuthn public keys and device metadata you configure.</li>
</ul>
<h4>How it works</h4>
<ol>
<li><strong>Administrator</strong> enables the plugin under <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> CS BioLogin</strong> and chooses which roles may use biometrics.</li>
<li><strong>User</strong> opens their profile (WordPress admin profile, <code>[csbisebi_device_manager]</code> page, or WooCommerce <strong>My Account <span aria-hidden="true" class="wp-exclude-emoji">→</span> CS BioLogin</strong>) and clicks <strong>Add Biometric Device</strong>. The browser shows the OS passkey/biometric prompt.</li>
<li><strong>Login</strong> — On <code>wp-login.php</code> (or WooCommerce login), the user chooses biometric sign-in. The plugin issues a WebAuthn challenge via the REST API, verifies the signed response, and creates a normal WordPress session.</li>
</ol>
<p>REST routes live under <code>csbisebi-biometric-login/v1</code> on your own site (for example <code>/wp-json/csbisebi-biometric-login/v1/auth/options</code>). No external API keys are required.</p>
<h4>WooCommerce</h4>
<p>When WooCommerce is active, CS BioLogin adds a <strong>My Account</strong> tab, checkout/account login prompts, and automatic use of the account area instead of a standalone management page.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.2 or later</li>
<li>PHP 7.4+ with OpenSSL</li>
<li><strong>HTTPS</strong> on production (WebAuthn requires a secure context; <code>localhost</code> and <code>*.local</code> are allowed for development)</li>
</ul>
<h4>Privacy and data storage</h4>
<ul>
<li>Biometric samples stay on the user’s device.</li>
<li>The plugin stores passkey public keys, optional device labels, timestamps, and security log entries in your WordPress database.</li>
<li>Uninstalling the plugin (when data removal is enabled via uninstall) drops the custom credentials table and plugin options.</li>
</ul>


Alternatives to CS BioLogin – Seamless Biometric Authentication

Top alternatives