Lucas Catão Moraes

Este plugin substitui o formulário de login padrão do WordPress por um sistema de autenticação sem senha mais seguro.
Recursos principais: 
* Login sem senha via link seguro enviado por e-mail 
* Autenticação de dois fatores (2FA) via TOTP (Google Authenticator, Authy, etc.) 
* Códigos de backup para recuperação de acesso 
* Verificação de IP para segurança adicional 
* Rate limiting para prevenir ataques de força bruta 
* Painel de configurações completo no wp-admin 
* Opção de tornar 2FA obrigatório para perfis específicos
O link de login expira imediatamente após o primeiro uso ou após o tempo configurado (padrão 15 minutos). A autenticação só é permitida pelo mesmo IP que solicitou o login.

Dolutech Passwordless Login

Permite login seguro sem senha com tecnologia passwordless e autenticação de dois fatores (2FA) via TOTP.

Clayton LZ

Bye Bye Passwords brings modern passwordless authentication to WordPress using WebAuthn/Passkeys technology. Say goodbye to weak passwords and hello to secure, convenient login with biometrics, security keys, or platform authenticators.
<h4>Key Features</h4>
<ul>
<li>Passwordless Login – Sign in using Touch ID, Face ID, Windows Hello, or security keys</li>
<li>Multiple Passkeys – Register multiple devices for convenient access anywhere</li>
<li>Recovery Codes – Generate one-time backup codes for emergency access</li>
<li>Enhanced Security – Eliminate password-based attacks completely</li>
<li>User-Friendly – Simple setup with no technical knowledge required</li>
<li>Privacy-Focused – Your authentication data stays on your server</li>
<li>WordPress Integration – Seamlessly integrated into WordPress admin and login</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Register a passkey from your WordPress admin profile</li>
<li>Use your device’s built-in authentication (fingerprint, face, PIN)</li>
<li>Sign in instantly without typing passwords</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>SSL/HTTPS enabled website (required for WebAuthn)</li>
<li>Modern browser with WebAuthn support</li>
<li>PHP 7.2 or higher</li>
<li>WordPress 5.0 or higher</li>
</ul>
<h3>External Services</h3>
This plugin may connect to the FIDO Alliance Metadata Service (MDS) to download root certificates for authenticator validation.
<h4>FIDO Alliance Metadata Service</h4>
<ul>
<li>URL: https://mds.fidoalliance.org/</li>
<li>Purpose: Downloads attestation root certificates to verify the authenticity of security keys and passkey devices</li>
<li>When: Only when attestation verification is enabled and the plugin needs to update its certificate store (not during normal authentication)</li>
<li>Data sent: No personal or user data is transmitted – only a standard HTTP GET request</li>
<li>Service provider: FIDO Alliance</li>
<li>Terms of Use: https://fidoalliance.org/metadata/</li>
<li>Privacy Policy: https://fidoalliance.org/privacy-policy/</li>
</ul>
No user data, credentials, or personal information is ever sent to external services. All authentication happens locally on your server.

Bye Bye Passwords

Enable passwordless authentication for WordPress using WebAuthn/Passkeys. More secure, more convenient.

Dolutech Passwordless Login vs Bye Bye Passwords