BinaryCarpenter

<p>This plugin let you enable face login without using password. Thus, you don’t have to worry about keyloggers stealing your password.</p>
<h3>Why using face authentication for WordPress login?</h3>
<p>WordPress has grown so much since its beginning. People use WordPress for various purposes including building a store, create API and of course blogging. With its popularity comes hackers, attackers, phishers…<br />
Those bad guys do everything to break into your site and steal your information, including your business.</p>
<h3>How to prevent hackers from break into your site?</h3>
<p>There are various ways to get access to the admin of a website. However, the most common way is to hack the username and password. It may surprise you but many people still weak password nowadays. Passwords that contain only numbers, words are in dictionary … are the easiest to hack.<br />
The solution would be using a strong password which is impossible to remember.</p>
<p>However, you still have to store that password somewhere. Maybe in a text file.</p>
<p>When you open the text file to copy the password, someone can steal your password by simply peek at your computer or use a recording device.</p>
<h3>Using passwords is prone to hacks, what’s the fix</h3>
<p>If you say that using password is a risk, you are completely right. No matter how strong a password is, it can be stolen. But, what’s the alternative?</p>
<h3>Introducing to password-less login for WordPress</h3>
<p>The answer to the risk we mentioned is to stop using password completely. For real.</p>
<p>But you may wonder, how can you use password-less login on WordPress?</p>
<p>It’s simpler that you think. With today’s technology, there are smarter, more secure ways to verify one’s identity.</p>
<p>You have known fingerprints. Now we have face.</p>
<p>Imagine you can login to your site the same way you open your phone.</p>
<h3>How is this secure? Meet two-factor login</h3>
<p>If you door has only one lock, thieves have good chance to break into your house.<br />
But if you have two locks, their chances drop drastically.<br />
That’s the same theory of two factor login.<br />
The one that requests to access your site (maybe you) have to complete two challenges.<br />
Currently, many people use password for phase one and a simple token for later.<br />
But we have discussed the inconvenience of using password, also the risks.<br />
So, why don’t we treat ourselves a bit kinder by using something easy for us at both phases?</p>
<h3>Using two factor face authentication to login into your WordPress site</h3>
<p>Let’s imagine this, you go to your WordPress login page, instead of typing in the password, you only look at the camera.<br />
The site recogizes you as its owner. It wouldn’t let you in yet. There is a chance that someone uses a statue to fake your identity.<br />
Instead, it will send you a token (4 to 8 digits) to your prefered devices (Email, Authenticator app).</p>
<p>You then send the token to the site. If you provide the correct token, you are now login.</p>
<p>As you can see, it is almost impossible for attackers to impersonate anywhere in the whole process.</p>


WP Face Login – Face Authentication For WordPress

great

Enable face authentication login with ease

Pierre Lannoy

Hosterra

<p><strong>Sessions</strong> is a powerful sessions manager for WordPress with a multi-criteria sessions limiter and full analytics reporting about logins, logouts and account creation. It relies on the standard WordPress sessions manager and add it extra features and controls.</p>
<p>You can limit concurrent sessions, on a per role basis for the following criteria:</p>
<ul>
<li>count per user;</li>
<li>count per IP adresses;</li>
<li>count per country (requires the free <a href="https://wordpress.org/plugins/ip-locator/" rel="ugc">IP Locator</a> plugin);</li>
<li>count per device classes and types, client types, browser or OS (requires the free <a href="https://wordpress.org/plugins/device-detector/" rel="ugc">Device Detector</a> plugin).</li>
</ul>
<p>For each roles defined on your site, you can also block login based on private/public IP ranges, and define idle times for sessions auto-termination.</p>
<p>You can also set a maximum number of IPs used for each user – useful to limit credential sharing between many people.</p>
<p><strong>Sessions</strong> can report the following main items and metrics:</p>
<ul>
<li>KPIs: login success, active sessions, cleaned sessions, active users, turnover and spam sessions;</li>
<li>active and cleaned sessions details;</li>
<li>users and sessions variations;</li>
<li>moves distribution;</li>
<li>login/logout breakdowns;</li>
<li>password resets;</li>
</ul>
<p><strong>Sessions</strong> supports a set of WP-CLI commands to:</p>
<ul>
<li>manage WordPress active sessions (list, kill) – see <code>wp help sessions active</code> for details;</li>
<li>toggle on/off main settings – see <code>wp help sessions settings</code> for details;</li>
<li>modify operations mode – see <code>wp help sessions mode</code> for details;</li>
<li>display sessions and accounts statistics – see <code>wp help sessions analytics</code> for details.</li>
</ul>
<p>For a full help on WP-CLI commands in Sessions, please <a href="https://perfops.one/sessions-wpcli" rel="nofollow ugc">read this guide</a>.</p>
<blockquote>
<p><strong>Sessions</strong> is part of <a href="https://perfops.one/" rel="nofollow ugc">PerfOps One</a>, a suite of free and open source WordPress plugins dedicated to observability and operations performance.</p>
</blockquote>
<p><strong>Sessions</strong> is a free and open source plugin for WordPress. It integrates many other free and open source works (as-is or modified). Please, see ‘about’ tab in the plugin settings to see the details.</p>
<h4>Support</h4>
<p>This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin.</p>
<p>Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Just use the support section of this plugin page.</p>
<h4>Privacy</h4>
<p>This plugin, as any piece of software, is neither compliant nor non-compliant with privacy laws and regulations. It is your responsibility to use it – by activating the corresponding options or services – with respect for the personal data of your users and applicable laws.</p>
<p>This plugin doesn’t set any cookie in the user’s browser.</p>
<p>This plugin may handle personally identifiable information (PII). If the GDPR or CCPA or similar regulation applies to your case, you must adapt your processes (consent management, security measure, treatment register, etc.).</p>
<h4>Donation</h4>
<p>If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to <a href="https://www.laquadrature.net/en" rel="nofollow ugc">La Quadrature Du Net</a> or the <a href="https://www.eff.org/" rel="nofollow ugc">Electronic Frontier Foundation</a> which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!</p>


Sessions

The plugin is overly complex (I like my plugins to do just one thing) and puts two top level items in the wordpres menu.

Also relies on javascript and ajax so it is not parrticularly robust


Just do one job and do it simply and dont take over the admin and I´d be happy to give 5 stars

I want to love this plugin BUT

Powerful sessions manager for WordPress with sessions limiter and full analytics reporting capabilities.

WP Face Login – Face Authentication For WordPress vs Sessions