Locally mirrors commenters’ Gravatar, Libravatar and Mastodon avatars and serves them from your site, rather than loading them from a third-party web site upon each page load.
This has several effects:
<ul>
<li>
If most of the comments on a post have no avatar, those turn into one load of a shared image, instead of one for each comment, that happens to return the same “mystery” image.
</li>
<li>
You will be serving more (small) images.
</li>
<li>
If a commenter’s URL looks like a link to a Mastodon / ActivityPub profile, their Mastodon account’s avatar will be displayed.
</li>
<li>
When commenting, a live preview of the avatar tracks the contents of the “Email” field.
</li>
<li>
<a href="https://www.gravatar.com/" rel="nofollow ugc">gravatar.com</a> and <a href="https://www.libravatar.org/" rel="nofollow ugc">libravatar.org</a> no longer have a web-bug on your blog that is loaded by each viewer. Instead of being loaded at every page view, the avatar is loaded just once, on the server-side, at the time each new comment is posted.
</li>
<li>
If someone changes or deletes their avatar, your site continues displaying the image that was their avatar at the time that they last posted.
</li>
<li>
Likewise, the user’s Gravatar or Mastodon profile is saved along with their comment, viewable by admins even if they later change or delete it.
</li>
</ul>
<h3>Security and Privacy</h3>
<ul>
<li>
<a href="https://www.libravatar.org/" rel="nofollow ugc">Libravatar</a> is open source. Gravatar is <a href="https://en.wikipedia.org/wiki/Gravatar" rel="nofollow ugc">owned by WordPress</a>, and their <a href="https://automattic.com/privacy/" rel="nofollow ugc">privacy policy</a> says that they don’t monetize that info. But hey, corporate policies change, subpoenas exist, and domain names get sold.
</li>
<li>
Should you trust Gravatar with user data? Well, in 2024, Gravatar announced that they are <a href="https://jwz.org/b/ykXF" rel="nofollow ugc">pivoting to blockchain</a>, whatever that means, so that’s fairly disqualifying. See also <a href="https://jwz.org/b/ykPk" rel="nofollow ugc">WordPress “growth hacking”</a> and <a href="https://jwz.org/b/ykNg" rel="nofollow ugc">WordPress sells users’ data to train AI tools</a>.
</li>
<li>
There used to be a potential issue due to <a href="https://en.wikipedia.org/wiki/Gravatar#Security_concerns_and_data_breaches" rel="nofollow ugc">Gravatars using MD5 hashes</a>, but these days they use SHA256, so I assume that’s no longer a problem.
</li>
</ul>

Mirror Gravatar


The plugin does just what it says and it's a great way to improve WordPress just a little bit.


Great plugin to make WordPress a bit better

Locally mirror commenters' Gravatar or Mastodon profile images.

Jason Coleman

Paid Memberships Pro

Jared Atchison

<h4>Add an avatar upload field on frontend pages and Edit Profile screen so users can add a custom profile picture.</h4>
Community and Membership sites on WordPress use this plugin as a lightweight solution for custom user avatars. The plugin is compatible with bbPress, as well as many popular plugins with frontend user registration and profile management features.
Admins can upload a user’s avatar on the Edit User admin screen.
Basic User Avatars also supports front-end avatar management for sites that want to keep users out of the dashboard. To use this feature, add the shortcode <code>[basic-user-avatars]</code> to any page in your WordPress site. We recommended placing this shortcode on another logged-in account type page, such as the WooCommerce My Account page, the Membership Account page, or any other front-end profile edit form.
The Avatar Upload form is automatically added to the bbPress User Profile > Edit frontend page.
If you do not want your users to be able to update their avatar, navigate to Settings > Discussion and locate the “Local Avatar Permissions” setting. Check this box to only allow users with file upload capabilities to upload local avatars (Author role and above).
<h4>Seamlessly Migrate from WP User Avatar Plugin</h4>
Version 1.0.5 includes a feature to automatically convert avatars formerly loaded through the WP User Avatar plugin. This means that you can disable WP User Avatar, activate Basic User Avatars, and have a seamless transition for existing avatars in your site. Be sure to update any avatar upload form that used the <code>[avatar_upload]</code> shortcode to use the shortcode: <code>[basic-user-avatars]</code>.

Basic User Avatars

it may have been around for a while but this plugin still works well

still works with WP4.9.1

Add an avatar upload field on frontend pages and Edit Profile screen so users can add a custom profile picture.

Mirror Gravatar vs Basic User Avatars