Hossein

<p>Passwordless passkey login for WordPress using Face ID, fingerprint, Touch ID, and Windows Hello.</p>
<h3>🔐 Passwordless Login Is Here, and It’s Simpler Than You Think</h3>
<p><strong>Authentry</strong> brings passkey authentication to WordPress. One tap. One glance. Instantly signed in.</p>
<p>No passwords to type. No usernames to remember. No resets, no friction, no phishing.</p>
<p>Passkeys are built on the <strong>WebAuthn / FIDO2 standard</strong>, the same technology trusted by Google, Apple, and Microsoft. Authentry brings that same enterprise-grade security to any WordPress site, for free.</p>
<h3>👆 Your Users Already Know How to Use It</h3>
<p>They unlock their phone with a fingerprint or Face ID dozens of times a day. Authentry makes signing into your site feel exactly the same.</p>
<p>Here’s the flow: user taps the Authentry button <span aria-hidden="true" class="wp-exclude-emoji">→</span> confirms with Touch ID, Face ID, Android fingerprint, or Windows Hello <span aria-hidden="true" class="wp-exclude-emoji">→</span> they’re in. That’s it.</p>
<p>Enable <strong>usernameless login</strong> in settings and they don’t even need to type their email. The site finds their passkey automatically, as effortless as unlocking their phone.</p>
<p>💡 <strong>Perfect for:</strong> membership sites, WooCommerce stores, subscription platforms, and any audience that expects a fast, modern, mobile-first experience.</p>
<h3>✨ Key Features</h3>
<ul>
<li>🚫 <strong>Zero-password login</strong>: tap a fingerprint or glance at the camera to sign in instantly</li>
<li>👆 <strong>Full biometric support</strong>: Face ID, Touch ID, Android fingerprint, and Windows Hello</li>
<li>👤 <strong>Usernameless sign-in</strong>: passkey account discovery lets users skip typing their email entirely, with a smart fallback for unsupported devices</li>
<li>🛡️ <strong>FIDO2 / WebAuthn compliant</strong>: follows the W3C WebAuthn Level 2 specification</li>
<li>🔑 <strong>ES256 and RS256 support</strong>: works with all major authenticator types</li>
<li>🛒 <strong>Full WooCommerce integration</strong>: passkey buttons on login and registration forms, plus a Security Keys tab in My Account</li>
<li>⚙️ <strong>User profile management</strong>: view, rename, and delete passkeys from WP Admin, WooCommerce My Account, or any page via the <code>[authentry_manage]</code> shortcode</li>
<li>📌 <strong>Three ready-to-use shortcodes</strong>: <code>[authentry_button]</code> to sign in, <code>[authentry_register]</code> to add a passkey, <code>[authentry_manage]</code> for the full management UI</li>
<li>🧰 <strong>Developer-friendly hooks</strong>: filters and actions for complete customization</li>
<li>🎨 <strong>Tabbed settings page</strong>: General, Appearance, Security, Advanced, and Integration</li>
<li>⏱️ <strong>Rate limiting</strong>: transient-based, 10 requests per IP per minute</li>
<li>🔄 <strong>Replay attack protection</strong>: sign count strictly enforced per credential</li>
<li>🌙 <strong>Dark mode support</strong>: full CSS dark mode included out of the box</li>
</ul>
<h3>🌐 Supported Browsers</h3>
<ul>
<li>Chrome 67+ (desktop and Android)</li>
<li>Safari 16+ (macOS and iOS)</li>
<li>Firefox 60+</li>
<li>Microsoft Edge 18+</li>
<li>Samsung Internet 9.0+</li>
</ul>
<h3>📋 Shortcode Reference</h3>
<h3>Sign-In Button (guests)</h3>
<pre><code>[authentry_button label="Sign in with Passkey" style="default" redirect="" class=""]
</code></pre>
<h3>Add a Passkey (logged-in users only)</h3>
<pre><code>[authentry_register label="Add a passkey" style="default" class="" reload="1"]
</code></pre>
<p>Omit <code>label</code> to use the value set in Appearance settings. Set <code>reload="0"</code> to stay on the page after a successful registration.</p>
<h3>Full Passkey Management UI (logged-in users only)</h3>
<pre><code>[authentry_manage class="" title=""]
</code></pre>
<p>Lists all passkeys with rename, delete, and add controls, the same UI shown in WooCommerce My Account and the WP Admin profile page. Scripts load automatically.</p>
<h3>Shortcode Attributes – <code>[authentry_button]</code></h3>
<ul>
<li><code>label</code>: button text (default: from Appearance settings)</li>
<li><code>style</code>: <code>default</code>, <code>outline</code>, or <code>ghost</code></li>
<li><code>redirect</code>: URL to send the user after a successful login</li>
<li><code>class</code>: additional CSS class names</li>
</ul>
<h3>Shortcode Attributes – <code>[authentry_register]</code></h3>
<ul>
<li><code>label</code>: button text (default: from Appearance settings)</li>
<li><code>style</code>: <code>default</code>, <code>outline</code>, or <code>ghost</code></li>
<li><code>class</code>: extra CSS class on the wrapper</li>
<li><code>reload</code>: <code>1</code> (default) reloads the page after registration; <code>0</code>, <code>false</code>, or <code>no</code> stays on the current page</li>
</ul>
<h3>Shortcode Attributes – <code>[authentry_manage]</code></h3>
<ul>
<li><code>class</code>: extra CSS class on the wrapper</li>
<li><code>title</code>: optional section heading (default: “Security Keys”; also filterable via <code>authentry_manage_heading</code>)</li>
</ul>
<h3>🔧 Custom Login Pages</h3>
<p>Already have a custom login page? No problem. Just drop the Authentry button in and keep your existing form. No need to rebuild anything.</p>
<p><strong>✅ Recommended: Shortcode</strong></p>
<ol>
<li>Edit your custom login page</li>
<li>
<p>Add a Shortcode block:</p>
<p>[authentry_button]</p>
</li>
<li>
<p>Optionally, pass attributes:</p>
<p>[authentry_button label=”Sign in with Passkey” redirect=”https://yoursite.com/my-account/” style=”outline”]</p>
</li>
</ol>
<p>Authentry automatically enqueues its CSS and JavaScript on standard front-end pages. No extra setup needed.</p>
<p><strong>Alternative: PHP Template</strong></p>
<p>In your login template file:</p>
<pre><code>do_action( 'authentry_render_button', [ 'redirect' => home_url( '/my-account/' ) ] );
</code></pre>
<p>Any missing keys fall back to your <strong>Authentry > Appearance</strong> and <strong>General</strong> settings.</p>
<h3>Username / Email Field (non-usernameless flow)</h3>
<p>When usernameless login is off, or when a browser falls back from discovery mode, Authentry looks for a username or email field using these selectors:</p>
<ul>
<li><code>#user_login</code> (WordPress default)</li>
<li><code>input[name="username"]</code></li>
<li><code>input[name="email"]</code></li>
</ul>
<p>If the field is already filled when the user clicks the button, that value is sent automatically. If it’s empty, the user is prompted. With usernameless login on, users can often sign in without typing anything at all.</p>
<h3>Let Users Manage Their Passkeys</h3>
<p>On any member dashboard or account page (logged-in users), add the full management UI:</p>
<pre><code>[authentry_manage]
</code></pre>
<p>Or just the “Add a passkey” button with no list:</p>
<pre><code>[authentry_register]
</code></pre>
<p>In a theme template:</p>
<pre><code>do_action( 'authentry_render_manage', [ 'title' => 'Security Keys' ] );
</code></pre>
<h3>Page Builders & Late-Rendered Output</h3>
<p>If the button is printed after <code>wp_enqueue_scripts</code>, for example in some page builders or AJAX-loaded forms, fire this hook once before output:</p>
<pre><code>do_action( 'authentry_enqueue_public_assets' );
</code></pre>
<p>The <code>[authentry_register]</code> and <code>[authentry_manage]</code> shortcodes handle this automatically. Use the same hook in custom templates if styles or scripts appear to be missing.</p>
<h3>Redirects & Customization</h3>
<ul>
<li><strong>Per-button redirect:</strong> <code>redirect</code> attribute on <code>[authentry_button]</code>, or the <code>redirect</code> key in <code>authentry_render_button</code></li>
<li><strong>Global redirect:</strong> <strong>Authentry > General > Redirect URL after login</strong>, or the <code>authentry_redirect_url</code> filter</li>
<li><strong>Button HTML:</strong> <code>authentry_button_html</code> filter</li>
</ul>
<h3>For Developers</h3>
<p>See <strong>Authentry > Integration</strong> in the admin for the full reference of shortcodes, actions, filters, and REST API endpoints (<code>/wp-json/authentry/v1/...</code>). The global <code>window.Authentry</code> object is also available for advanced JavaScript integrations.</p>
<p><strong>Hook-Only Example (theme login template)</strong></p>
<p>Step 1 – In your login markup:</p>
<pre><code>do_action( 'authentry_render_button', [ 'context' => 'my-theme-login' ] );
</code></pre>
<p>Step 2 – In <code>functions.php</code> or your login class:</p>
<pre><code>add_filter( 'authentry_login_username_selectors', function( $selectors ) {
    $selectors[] = '#my-login-email';
    return $selectors;
} );

add_filter( 'authentry_redirect_url', function( $url, $user ) {
    return home_url( '/account/' );
}, 10, 2 );
</code></pre>
<h3>🧑‍💻 Developer Hooks</h3>
<h3>Actions – Render UI in Theme Templates</h3>
<pre><code>do_action( 'authentry_render_button', $args );
do_action( 'authentry_render_manage', [ 'class' => '', 'title' => '' ] );
do_action( 'authentry_render_passkey_reminder', [ 'context' => 'member-dashboard' ] );
</code></pre>
<h3>Filters</h3>
<ul>
<li><code>authentry_creation_options</code>: modify WebAuthn credential creation options</li>
<li><code>authentry_request_options</code>: modify WebAuthn authentication request options</li>
<li><code>authentry_redirect_url</code>: modify the post-login redirect URL</li>
<li><code>authentry_button_html</code>: modify the rendered login button HTML</li>
<li><code>authentry_register_shortcode_html</code>: modify the rendered <code>[authentry_register]</code> HTML</li>
<li><code>authentry_manage_shortcode_html</code>: modify the rendered <code>[authentry_manage]</code> HTML</li>
<li><code>authentry_manage_heading</code>: modify the section heading on the management UI</li>
<li><code>authentry_render_manage_args</code>: adjust args before <code>authentry_render_manage</code> output</li>
<li><code>authentry_render_button_args</code>: adjust args before <code>authentry_render_button</code> output</li>
<li><code>authentry_login_username_selectors</code>: CSS selectors for username/email fields on custom login forms</li>
<li><code>authentry_user_has_passkey</code>: filter whether a user has at least one registered passkey</li>
<li><code>authentry_show_passkey_reminder</code>: control the built-in passkey setup reminder notice</li>
<li><code>authentry_passkey_reminder_profile_url</code>: change the profile URL linked from the built-in reminder</li>
</ul>
<p><strong>User meta</strong></p>
<ul>
<li><code>authentry_has_passkey</code>: <code>1</code> when the user has at least one passkey, otherwise <code>0</code> (kept in sync automatically)</li>
</ul>
<p><strong>Helper function</strong></p>
<ul>
<li><code>authentry_user_has_passkey( $user_id = 0 )</code>: returns true when the user has registered at least one passkey</li>
<li><code>authentry_render_passkey_reminder( $args )</code>: echo the built-in reminder in a custom template or panel</li>
<li><code>authentry_get_passkey_reminder_html( $args )</code>: return the reminder HTML as a string</li>
</ul>
<h3>Actions</h3>
<ul>
<li><code>authentry_enqueue_public_assets</code>: enqueue public CSS/JS (useful when output is built late)</li>
<li><code>authentry_before_manage_passkeys</code> / <code>authentry_after_manage_passkeys</code>: fires before/after the management UI block</li>
<li><code>authentry_before_render_login_button</code>: fires before sign-in button HTML is echoed in custom templates</li>
<li><code>authentry_after_render_login_button</code>: fires after sign-in button HTML is echoed in custom templates</li>
</ul>


Authentry – Face ID, Fingerprint & Passkey Login

Passwordless passkey login for WordPress using Face ID, fingerprint, Touch ID, and Windows Hello.

miniOrange

miniorange

<p>Meet the new global standard of web authentication (WebAuthn). WebAuthn is a core component of FIDO2 Alliance which includes protocols that are based on public key cryptography and are strongly resistant to phishing (to varying degrees).<br />
WebAuthn is a browser-based API by FIDO2 that allows web applications to simplify and secure user authentication by using their registered devices (android phones/ iphones, laptops, etc.) as factors. WebAuthn uses public key cryptography by FIDO2 to protect users from advanced phishing attacks. With WebAuthn’s Passwordless login using Fingerprint, FaceID, Touch ID plugin, you can allow your users to login to your website by just entering their device credentials (Fingerprint, windows hello, face ID, touch ID, etc).</p>
<p>WebAuthn increases the security of your website by providing an additional layer of security and it also enhances the user experience of your website. Webauthn protects your website from many common attacks like phishing, brute force protection, man in the middle attack, malwares, etc.</p>
<p><strong><a href="https://www.miniorange.com/webauthn" rel="nofollow ugc">WebAuthn</a> requires HTTPS connection or <code>localhost</code> for secure authentication</strong></p>
<h4>Passwordless login with webauthn</h4>
<p>FIDO2/WebAuthn implements the concept of passwordless authentication. The users will enter their username and if their device/keys are configured with WebAuthn then they need to verify it for successful login. If the device is not registered for WebAuthn, then users need to enter their password and then they can configure the WebAuthn. This will make the user experience better by removing the password. It will also increase the security as webauthn is based on public key cryptography authentication and it allows the user to login only if the user is authenticated from the trusted device.</p>
<h4>WebAuthn as the [second factor](https://plugins.miniorange.com/2-factor-authentication-for-wordpress)</h4>
<p>WebAuthn is also used as the <a href="https://plugins.miniorange.com/login-to-your-wordpress-site-with-fingerprint-and-faceid-using-webauthn" rel="nofollow ugc">second factor</a> to add an extra layer of security on your website. In this case the users will enter their username and password to verify their first factor and after that they will be prompted with the WebAuthn for verification of the second layer of security. This will protect your website even if the users’ passwords are compromised, because to verify the identity of any user you need to confirm the web authentication with their device.</p>
<h4>Usernameless login with WebAuthn*</h4>
<p>WebAuthn also allows you to provide an option where users can login to your website without entering their username and password. The user will be automatically picked at login via WebAuthn.</p>
<p>As most of the users do not want to maintain too many credentials so in that case you can allow your users to use their device as the credentials and if the device is verified they will be logged into the site.</p>
<h4>Device limitation*</h4>
<p>The WebAuthn plugin provides an option where you can put a limit on the number of devices a user can register with WebAuthn. This will be helpful when you want only a particular device to login to the website.<br />
This will allow you to restrict the number of devices a user can use to access your website.</p>
<h4>Role based WebAuthn*</h4>
<p>With this you can allow WebAuthn to specific user roles. The users who have been allowed to use WebAuthn can login with WebAuthn and others will use their usual wordpress login credentials for access, without getting prompted for the WebAuthn.</p>
<h4>User-specific WebAuthn</h4>
<p>With this you can select the specific users who can login using WebAuthn to your website. Other users have to use their WordPress credentials to login.</p>
<ul>
<li>supported in the Premium version</li>
</ul>


WebAuthn – Passwordless login using Fingerprint, FaceID, Touch ID, Yubikey

WebAuthn is a new way of authenticating your user on the website. WebAuthn by the…

Authentry – Face ID, Fingerprint & Passkey Login vs WebAuthn – Passwordless login using Fingerprint, FaceID, Touch ID, Yubikey