wppasskey

mbuiux

<p>Passwords are the single biggest security risk for your WordPress site. They get leaked, reused, or broken by automated brute-force attacks. Standard Two-Factor Authentication (2FA) adds safety, but typing in temporary codes from SMS or authenticator apps introduces annoying friction to your daily workflow.</p>
<p><strong>Advanced Passkeys for Secure Login</strong> brings the future of un-phishable, modern authentication directly to your WordPress site using the official FIDO2 / WebAuthn standard.</p>
<p>Users register a passkey just once using their device’s built-in biometric sensor (Face ID, Touch ID, Windows Hello) or a hardware security key (like a YubiKey). Future sign-ins take less than a second—completely bypassing the traditional password field.</p>
<h3>Why Switch to Passkeys?</h3>
<ul>
<li><strong>Immune to Phishing:</strong> Passkeys are cryptographically bound to your specific domain. A fake login page cannot trick or steal a passkey.</li>
<li><strong>Goodbye Brute-Force:</strong> Because there is no static password on the server to guess, automated bot attacks are completely neutralized.</li>
<li><strong>Ultimate Ecosystem Sync:</strong> Works seamlessly with iCloud Keychain, Google Password Manager, and 1Password for painless cross-device access.</li>
</ul>
<h3>Ecosystem-Wide Integrations Included</h3>
<p>Unlike basic alternatives, this plugin features intelligent, dependency-aware integration modules that automatically inject passkey entry points into your favorite plugins. It features out-of-the-box support for <strong>WooCommerce, Easy Digital Downloads, MemberPress, Ultimate Member, LearnDash, BuddyBoss, Gravity Forms, and PMPro</strong>.</p>
<h3>Features</h3>
<ul>
<li><strong>One-Click Passwordless Auth:</strong> Adds a native “Sign in with Passkey” button directly to the WordPress login screen.</li>
<li><strong>Ecosystem Integrations:</strong> Built-in aware modules, blocks, and shortcodes for WooCommerce, MemberPress, LearnDash, BuddyBoss, and more.</li>
<li><strong>Gutenberg Blocks & Shortcodes:</strong> Automatically registers custom login cards and shortcodes based on active plugins.</li>
<li><strong>Admin Dashboard Overview:</strong> Keep track of credential performance with an Authenticator Overview card and Last Login activity logs.</li>
<li><strong>Granular Role Controls:</strong> Easily configure exactly which user roles are permitted to use passkey authentication (Default: Administrators).</li>
<li><strong>Brute-Force Rate Limiting:</strong> Hardened local security with built-in login rate-limiting and automated daily log cleanups.</li>
<li><strong>Multisite Compatible:</strong> Network-aware provisioning instantly configures security settings for newly created network sites.</li>
<li><strong>Clean Performance & Housekeeping:</strong> Lightweight footprint with a clean uninstall routine that leaves zero orphaned tables or options behind.</li>
</ul>
<h3>Developer Hooks: Last Used Pill</h3>
<p>Developers can use these filters inside a theme or functionality plugin to globally customize or suppress the login form’s Last used passkey indicator pill.</p>
<h4>Available filters</h4>
<ul>
<li><code>advapafo_last_used_pill_freshness_days</code> — default 90 days</li>
<li><code>advapafo_last_used_pill_visible</code> — final on/off override</li>
<li><code>advapafo_last_used_pill_label</code> — customize label text</li>
</ul>
<h4>Example implementation</h4>
<pre><code><?php
/**
 * Example customization for Last used login pill.
 */

// Show pill if passkey login is within 120 days.
add_filter( 'advapafo_last_used_pill_freshness_days', function ( $days, $user ) {
    unset( $user );
    return 120;
}, 10, 2 );

// Hide pill for administrator accounts.
add_filter( 'advapafo_last_used_pill_visible', function ( $visible, $timestamp, $freshness_days, $user ) {
    unset( $timestamp, $freshness_days );

    if ( $user instanceof WP_User && in_array( 'administrator', (array) $user->roles, true ) ) {
        return false;
    }

    return $visible;
}, 10, 4 );

// Label override.
add_filter( 'advapafo_last_used_pill_label', function ( $label, $user ) {
    unset( $user );
    return 'Previously used';
}, 10, 2 );
</code></pre>


Advanced Passkeys for Secure Login

Secure WordPress with passwordless passkey login using Face ID, Touch ID, Windows Hello, and hardware security keys.

Marcus (aka @msykes)

Marcus

Pixelite

<p>Login With Ajax is for sites that need user logins or registrations and would like to avoid the normal wordpress login pages, or add AJAX effects to the regular login pages. This plugin adds the capability of placing a login widget in the sidebar with smooth AJAX login effects.</p>
<p>Some of the features:</p>
<ul>
<li>AJAX-powered logins, no screen refreshes!
<ul>
<li>Login</li>
<li>Registration</li>
<li>Remember/Reset Password</li>
</ul>
</li>
<li>PassKeys <strong>(new in 4.4)</strong>
<ul>
<li>Next-Generation security, no passwords required!</li>
<li>Users can log in without a username AND password.</li>
<li>Biometric support (fingerprint, face ID, etc.)</li>
</ul>
</li>
<li>2FA – Two-Factor Authentication
<ul>
<li>TOTP – Time-based One-Time Password</li>
<li>Scan a QR code with popular authenticator apps like Google Authenticator, Authy, etc.</li>
<li>Email – Send a code to the user’s email address</li>
<li>Backup Codes – Generate and use backup codes</li>
</ul>
</li>
<li>Integrate 2FA setup options in other plugin account pages
<ul>
<li>WooCommerce</li>
<li>BuddyPress</li>
<li>BuddyBoss</li>
</ul>
</li>
<li>“AJAXify” other login forms
<ul>
<li>Create a better login experience in the default WP login form with AJAX effects for logins, password recovery and registration.</li>
<li>Regular WP login and registration forms</li>
<li>WooCommerce login forms</li>
<li>Events Manager login forms</li>
</ul>
</li>
<li>Many ways to display and customize your login form:
<ul>
<li>Gutenberg Blocks</li>
<li>Full-site editor compatible</li>
<li>Widgets (classic and blocks)</li>
<li>Shortcode</li>
<li>Template Tags</li>
<li>PHP API</li>
</ul>
</li>
<li>Flexible templates and options
<ul>
<li>Multiple templates to choose from</li>
<li>Including Modal/Pop-Up login forms</li>
<li>Responsive and Accessible!</li>
<li>Choose a base color for each individual login form.</li>
<li>Individual display options via all display methods (e.g. Gutenberg Blocks, Shortcode etc.)</li>
<li>Create your own upgrade-safe templates, or override our own ones.</li>
</ul>
</li>
<li>Custom Login/Logout redirections
<ul>
<li>Redirect users to custom URLs on Login and Logout</li>
<li>Redirect users with different roles to custom URLs</li>
<li>WPML – Language-specific redirects</li>
</ul>
</li>
<li>Modify registration email templates</li>
<li>Other Features
<ul>
<li>Disable CSS styling (via shortcode or PHP display methods)</li>
<li>SSL-compatible</li>
<li>Fallback mechanism, will still work on javascript-disabled browsers</li>
<li>Compatible with WordPress, MultiSite, BuddyPress and many other plugins</li>
</ul>
</li>
<li>Developer Friendly
<ul>
<li>Multiple PHP and JS hooks</li>
<li>Overridable CSS and JS files</li>
<li>Easy-to-customize and overridable template files</li>
<li>Well-documented</li>
</ul>
</li>
</ul>
<p>First released in 2009, the oldest login plugin for WordPress, regularly maintained and updated since then!</p>
<h4>Pro Add-On Features</h4>
<p>As of version 4.0, <a href="https://loginwithajax.com/" rel="nofollow ugc">we now offer a Pro add-on</a> which extends Login With AJAX with multiple new features:</p>
<ul>
<li><em>Security Features</em> – Harden the security of your login forms
<ul>
<li>2FA – Additional Two-Factor Authentication Methods:</li>
<li>SMS – Send a code to the user’s phone</li>
<li>WhatsApp – Send a message, user clicks a button, done!</li>
<li>Telegram – Send a message, user clicks a button, done!</li>
<li>reCaptcha (v2, v2 Invisible and v3)</li>
<li>Login limiter</li>
</ul>
</li>
<li><em>3rd Party Page Builder Blocks/Widgets/Modules</em>
<ul>
<li>Divi</li>
<li>Elementor</li>
</ul>
</li>
<li>More on the way!</li>
</ul>
<h4>Getting Help/Support</h4>
<blockquote><p> Version 4 is a major overhaul of the plugin, which has remained largely unchanged for 11 years yet remained a staple tool for logins to WordPress! Changes include a complete rewrite of login templates updated to modern stadnards and practices, as well as new WP features such as Gutenberg Blocks. </p></blockquote>
<p>If you’re stuck, we strongly suggest visiting our <a href="https://docs.loginwithajax.com/" rel="nofollow ugc">Documentation Site</a> which contains exensive information and advice on setup and troubleshooting.</p>
<p>If you have any problems with the plugin after reading our <a href="https://doocs.loginwithajax.com/troubleshooting/" rel="nofollow ugc">Troubleshooting</a>, please visit our freely supported <a href="https://wordpress.org/support/plugin/login-with-ajax" rel="ugc">community forums</a>, or <a href="https://loginwithajax.com/gopro/" rel="nofollow ugc">Go Pro</a> for premium support.</p>
<h3>Notes</h3>
<p>Please visit our <a href="https://docs.loginwithajax.com" rel="nofollow ugc">documentation site</a>, which is regularly and extensively maintained and updated with all the information relevant to getting started, advanced setup and troubleshooting common issues.</p>


Login With Ajax – Fast Logins, 2FA, Redirects

I have it working on several websites, awesome!

Add beautiful login forms with smooth AJAX login/registration effects, 2FA support, custom redrection options and many more login-related features!

Advanced Passkeys for Secure Login vs Login With Ajax – Fast Logins, 2FA, Redirects