susheelhbti

<p><strong>Keyless Login</strong> brings modern, phishing-resistant authentication to your WordPress site.</p>
<p>Log in with your fingerprint, face, or a hardware security key — no password ever required or transmitted. Implemented entirely in pure PHP using only the built-in <code>openssl</code> extension. No Composer, no vendor folder, no third-party libraries.</p>
<h4>How It Works</h4>
<p>KeylessWP implements the <a href="https://www.w3.org/TR/webauthn-2/" rel="nofollow ugc">W3C WebAuthn Level 2</a> specification from scratch:</p>
<ul>
<li>A custom CBOR decoder parses authenticator data</li>
<li>Custom ASN.1/DER builders construct public keys</li>
<li>PHP’s built-in <code>openssl_verify()</code> verifies ECDSA P-256 (ES256) and RSA-2048 (RS256) signatures</li>
<li>Credentials are stored in a dedicated database table with sign-count clone detection</li>
</ul>
<h4>Supported Authentication Methods</h4>
<ul>
<li>🖐 Fingerprint sensors (Touch ID, Windows Hello)</li>
<li>😊 Face recognition (Face ID, Windows Hello face camera)</li>
<li>🔑 Hardware security keys (YubiKey, Google Titan Key, Feitian)</li>
<li>🔐 Platform passkey managers (iCloud Keychain, Google Password Manager)</li>
</ul>
<h4>Features</h4>
<ul>
<li>Full FIDO2 / WebAuthn Level 2 implementation — pure PHP</li>
<li>ECDSA P-256 (ES256) and RSA-2048 (RS256) signature verification</li>
<li>Zero external libraries — only PHP’s built-in <code>openssl</code> extension required</li>
<li>Passkey registration and management from the user profile page</li>
<li>Per-credential device naming, creation date, and last-used tracking</li>
<li>Sign-count verification on every authentication (clone detection)</li>
<li>Phishing-resistant: credentials are cryptographically bound to your domain</li>
<li>Admin settings page with live usage statistics</li>
<li>Graceful fallback: the standard password form remains available</li>
<li>Translatable — all strings use <code>__()</code> with the <code>keylesswp</code> text domain</li>
</ul>
<h4>Privacy</h4>
<p>KeylessWP does not collect, transmit, or share any user data. No external services are contacted. Biometric data never leaves the user’s device — only a cryptographic public key is stored on the server.</p>


Keyless Login

Passwordless WebAuthn/FIDO2 login for WordPress. 100% pure PHP, zero external dependencies.

Axton

<p>WebAuthn is a new way for you to authenticate in web. It helps you replace your passwords with devices like Passkeys, USB Keys, fingerprint scanners, Windows Hello compatible cameras, FaceID/TouchID and more. Using WebAuthn, you can login to your a website with a glance or touch.</p>
<p>When using WebAuthn, you just need to click once and perform a simple verification on the authenticator, then you are logged in. <strong>No password needed.</strong> If your device supports Passkey, your authenticator can roam seamlessly across multiple devices for a more convenient login experience.</p>
<p>WP-WebAuthn is a plug-in for WordPress to enable WebAuthn on your site. Just download and install it, and you are in the future of web authentication.</p>
<p>WP-WebAuthn also supports usernameless authentication.</p>
<p>This plugin has 4 built-in shortcodes and 4 built-in Gutenberg blocks, so you can add components like register form to frontend pages.</p>
<p>Please refer to the <a href="http://doc.flyhigher.top/wp-webauthn" rel="nofollow ugc">documentation</a> before using the plugin.</p>
<p>This plugin currently has <em>BETA</em> multisite support, if you find any issue in multisite, feel free to <a href="https://github.com/yrccondor/wp-webauthn/issues/new" rel="nofollow ugc">open an issue</a> on GitHub.</p>
<p><strong>PHP extensions gmp and mbstring are required.</strong></p>
<p><strong>WebAuthn requires HTTPS connection or <code>localhost</code> to function normally.</strong></p>
<p>You can contribute to this plugin on <a href="https://github.com/yrccondor/wp-webauthn" rel="nofollow ugc">GitHub</a>.</p>
<blockquote>
<p>Please note that this plugin does NOT support Internet Explorer (including IE 11). To use FaceID or TouchID, you need to use iOS/iPadOS 14+.</p>
</blockquote>
<h4>Security and Privacy</h4>
<p>WebAuthn has become a W3C Recommendation since March 2019, which enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users using hardware authenticators. WebAuthn focuses on both security and privacy, it offers the possibility to create a secure authentication process without having to transfer any private data such as recognition data and fingerprint data. It will be the future of web authentication.</p>
<h4>GDPR Friendly</h4>
<p>When authenticating with WebAuthn, no private data will leave user’s device and no third-party involvement. The credentials transferred are not associate to any user’s information but only for authentication. It’s GDPR Friendly.</p>


WP-WebAuthn

WP-WebAuthn enables passwordless login through FIDO2 and U2F devices like Passkey, FaceID or Windows Hello for your site.

Keyless Login vs WP-WebAuthn