Ivan Kristianto

<p>This innovative plugin introduces passkey login to your WordPress experience. No more struggling to remember complex passwords.<br />
Simply use your fingerprint, face ID, or a secure PIN to log in with ease. You can still use your username and password to login to your site as fallback.</p>
<h3>Enhanced Security, Frictionless Access:</h3>
<ol>
<li>Effortless Login: Unlock the power of passkeys for a smooth and secure login experience.</li>
<li>Superior Security: Passkeys offer enhanced protection against breaches compared to traditional passwords.</li>
<li>Convenience at Your Fingertips: Enjoy the freedom of logging in with your biometrics or a secure PIN.</li>
</ol>
<h3>GitHub Repository</h3>
<p>You can find the source code of this plugin on <a href="https://github.com/ivankristianto/wp-passkey/" rel="nofollow ugc">GitHub</a></p>


Biometric Authentication


Nice work. Integrates very well and works great. I like that it adds another authentication method and doesn't remove the default login.


It just works!

Passkeys are a safer and easier alternative to passwords. Simply use your fingerprint or face ID to log in with ease.

Kakshak Kalaria

Adarsh Verma

Concatstring Solutions

Sumit Tejani

Hardik Patel

Vrutika Darji

<p><strong>CS BioLogin</strong> adds passwordless sign-in to WordPress using the WebAuthn standard (FIDO2 / passkeys). Visitors can authenticate with Face ID, Touch ID, Windows Hello, or a platform fingerprint reader. Biometric templates never leave the user’s device; only public key credentials are stored in your WordPress database.</p>
<h4>What this plugin does</h4>
<ul>
<li>Adds a <strong>Sign in with Biometrics</strong> option on the WordPress login screen (with optional password fallback).</li>
<li>Lets logged-in users <strong>register, rename, update, and remove</strong> passkeys from their profile, a front-end shortcode page, or WooCommerce My Account.</li>
<li>Provides an admin screen for <strong>settings, security logs, and per-user device management</strong>.</li>
<li>Applies <strong>rate limiting and lockout</strong> on authentication attempts.</li>
</ul>
<h4>What this plugin does NOT do</h4>
<ul>
<li>It does <strong>not</strong> send user data, credentials, or biometrics to third-party servers. All verification runs on your site over HTTPS.</li>
<li>It does <strong>not</strong> store fingerprint or face images—only WebAuthn public keys and device metadata you configure.</li>
</ul>
<h4>How it works</h4>
<ol>
<li><strong>Administrator</strong> enables the plugin under <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> CS BioLogin</strong> and chooses which roles may use biometrics.</li>
<li><strong>User</strong> opens their profile (WordPress admin profile, <code>[csbisebi_device_manager]</code> page, or WooCommerce <strong>My Account <span aria-hidden="true" class="wp-exclude-emoji">→</span> CS BioLogin</strong>) and clicks <strong>Add Biometric Device</strong>. The browser shows the OS passkey/biometric prompt.</li>
<li><strong>Login</strong> — On <code>wp-login.php</code> (or WooCommerce login), the user chooses biometric sign-in. The plugin issues a WebAuthn challenge via the REST API, verifies the signed response, and creates a normal WordPress session.</li>
</ol>
<p>REST routes live under <code>csbisebi-biometric-login/v1</code> on your own site (for example <code>/wp-json/csbisebi-biometric-login/v1/auth/options</code>). No external API keys are required.</p>
<h4>WooCommerce</h4>
<p>When WooCommerce is active, CS BioLogin adds a <strong>My Account</strong> tab, checkout/account login prompts, and automatic use of the account area instead of a standalone management page.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.2 or later</li>
<li>PHP 7.4+ with OpenSSL</li>
<li><strong>HTTPS</strong> on production (WebAuthn requires a secure context; <code>localhost</code> and <code>*.local</code> are allowed for development)</li>
</ul>
<h4>Privacy and data storage</h4>
<ul>
<li>Biometric samples stay on the user’s device.</li>
<li>The plugin stores passkey public keys, optional device labels, timestamps, and security log entries in your WordPress database.</li>
<li>Uninstalling the plugin (when data removal is enabled via uninstall) drops the custom credentials table and plugin options.</li>
</ul>


CS BioLogin – Seamless Biometric Authentication

Secure biometric login (WebAuthn / FIDO2 / Passkeys) for WordPress and WooCommerce using Face ID, Touch ID, or fingerprint.

Biometric Authentication vs CS BioLogin – Seamless Biometric Authentication