A simple plugin to add API key-based authentication to the WordPress REST API. Manage multiple API keys and secure your REST API endpoints.

rfsecurity

REST API Authentication and Security

Add a security layer to your WordPress site, and protect your WordPress rest endpoints with various authentication methods.

Kamal Hosen

WP REST API Key Authentication adds a simple API key-based authentication method to the WordPress REST API. This plugin is perfect for developers who want to interact with the REST API securely without relying on complex OAuth authentication mechanisms.
<h3>Key Features:</h3>
<ul>
<li>Multiple API Keys: Create and manage multiple API keys with custom names.</li>
<li>Secure API Key Storage: API keys are hashed and securely stored in the WordPress database.</li>
<li>Single Display for Security: API keys are shown only once after creation.</li>
<li>REST API Access Control: Authenticate requests by including an API key in the <code>Authorization</code> header.</li>
<li>Admin Interface: Manage API keys with a user-friendly admin page.</li>
<li>Copy to Clipboard Popup: Easily copy generated API keys with a built-in popup.</li>
</ul>
The plugin is lightweight and integrates seamlessly with WordPress.
<h3>Usage</h3>
<ol>
<li>
Generate an API Key:
<ul>
<li>Go to API Keys in the WordPress admin menu.</li>
<li>Enter a name for the API key and click “Generate API Key”.</li>
<li>The API key will appear in a popup. Copy it immediately, as it will not be displayed again.</li>
</ul>
</li>
<li>
Use the API Key:
<ul>
<li>Include the API key in the <code>Authorization</code> header of your REST API requests: 
 <code>Authorization: Bearer YOUR_API_KEY</code></li>
</ul>
</li>
<li>
Delete API Keys:
<ul>
<li>To revoke access, delete an API key from the API Keys admin page.</li>
</ul>
</li>
</ol>
<h3>License</h3>
This plugin is licensed under the GPLv2 or later. See the License URI for details.

Alternatives to WP REST API Key Authentication

Top alternatives