passwordless4u

<p>Passwordless passwordless authentication Plugin enables your WordPress admin/team login system to utilize FIDO/FIDO2 certified strong customer authentication, including the ability to provide more sensitive operations such as credential management. By leveraging the end user’s existing device biometrics you can quickly integrate multi-factor authentication into your site. Our service is aligned with PSD2, GDPR, CCPA, and HIPPA.</p>
<h3>Benefits:</h3>
<p>Privacy:<br />
  – Biometric information never leaves your device (based on FIDO/FIDO2 principles), not stored in the cloud.<br />
  – No tracking of customers.<br />
Convenience:<br />
  – Eliminate the need for your users to enter a password when they log in to your website from their primary device.<br />
  – Reduce your user abandonment rates by making transactions as seamless as possible.<br />
Compliance:<br />
  – FIDO/FIDO2 is aligned with the GDPR and PSD2 principals around the use of strong authentication.<br />
Security:<br />
  – Boost your website’s security through the use of multifactorial authentication with strong public/private key credentials.</p>
<p>For more information on how the passwordless authentication plugin works, please view our <a href="https://docs.passwordless4u.com/" rel="nofollow ugc">documentation</a>.</p>
<h3>Tell us how we’re doing.</h3>
<p>Have the plugin in production? Tell us about your site on <a href="help@passwordless4u.com" rel="nofollow ugc">help@passwordless4u.com</a> and we’ll post on our social channels!</p>
<h3>How do I set up the plugin?</h3>
<p>An answer to that question.</p>
<p>Once you install the plugin, click on ‘Configure’. Here, you have two setup options:</p>
<p><em>Let Passwordless do the work for you (estimated time: 15s to 30s)</em></p>
<ol>
<li>Login to your WordPress developer dashboard</li>
<li>Install the Passwordless authentication plugin</li>
<li>First need to create account on https://www.passwordless4u.com/</li>
<li>Go to dashboard, click on add application and create on Web/WordPress app and get the details such as clientId and baseUrl</li>
<li>Come back to wordpress developer setting you’ll see the Passwordless menu</li>
<li>fill the details such as base url and client Id.</li>
<li>save the settings</li>
<li>Two pages are generated one is Passwordless Sign in and other is authentication token</li>
<li>Passwordless menu, you’ll see the add device option, click on it.</li>
<li>Choose authentication method, there are 3 authentication method 1. Same Device 2. Appless QR and 3. InApp QR<br />
choose one of them and hit on register button.</li>
<li>Once you register you can add more devices to your account. Choose the authentication methods and hit on add device button.</li>
<li>Done.</li>
</ol>
<h3>For whom this plugin for?</h3>
<p>This plugin only for the wordpress admin and other wordpress role base user  this plugin authenticate the wordpress admin and other team members.</p>
<h3>I need to customize the plugin or I need support and help?</h3>
<p>Please email us at <a href="help@passwordless4u.com" rel="nofollow ugc">help@passwordless4u.com</a></p>
<h3>Where can I report bugs or leave feedback?</h3>
<p>Please email us at <a href="help@passwordless4u.com" rel="nofollow ugc">help@passwordless4u.com</a></p>
<h3>I have other queries or need additional support.</h3>
<p>For any other queries or if you need additional support, please email us at <a href="help@passwordless4u.com" rel="nofollow ugc">help@passwordless4u.com</a></p>
<h4>Error: ClientId and BaseUrl is not added</h4>
<p>This error means that the plugin is unable to verify the validity of the login or register claim. This can often be resulted from a bad baseURL and api key combination. Please double check your Base URL and clientId API Key parameters in the plugin settings against your credentials on the Passwordless’s dashboard.</p>
<h4>1.3.4</h4>
<p>push send alert message issue resolved</p>
<h4>1.3.3</h4>
<p>issue resolved</p>
<h4>1.3.2</h4>
<p>issue resolved</p>
<h4>1.3.1</h4>
<p>resolved issues with inApp Auth and Push notification.</p>
<h4>1.3.0</h4>
<p>improved the plugin functionality and added passwordless mobile links.</p>
<h4>1.2.2</h4>
<p>remove create table function: no need anymore</p>
<h4>1.2.1</h4>
<p>Multiple device support added.</p>
<h4>1.2.0</h4>
<p>Simple the flow of plugin<br />
fix the issues<br />
added login functionality for all team members</p>
<h4>1.1.0</h4>
<p>documentation changes</p>
<h4>1.0.0</h4>
<p>Initial Version.<br />
Features:<br />
– Same Platform login (Biometric, face, pin)<br />
-Appless QR login(for remote login)<br />
– inApp QR (through passwordless’s custom android and ios app)</p>


Passwordless Authentication

Go passwordless authentication and eliminate security risks.

tynor

Chris Teitzel

<h4>API & ENCRYPTION KEY MANAGEMENT FOR WORDPRESS</h4>
<p>Lockr is the first hosted secrets management solution for WordPress, providing an affordable solution for all sites to properly manage site secrets such as API and encryption keys used by their plugins. Lockr’s offsite key management solution protects against critical vulnerabilities, delivers best-practice security to help sites comply with many industry regulations, and provides a Defense in Depth approach to securing your data. Lockr also provides AES-256 encryption to your custom plugins in a seamless manner to protect data at rest in your site. And best of all, even though it delivers enterprise-grade key management, you can try it for 2 weeks free! Learn more at http://www.lockr.io.</p>
<h4>Lockr Features:</h4>
<ul>
<li>Easy to configure and setup in WordPress</li>
<li>Simple UI to override any option stored by plugins</li>
<li>Safe and Secure offsite key storage</li>
<li>Works with any API and encryption key</li>
<li>Built-in AES-256 Encryption functions to secure data in your site</li>
<li>99.9% uptime guarantee (SLA Available for Enterprise Customers)</li>
<li>Regular Backups</li>
<li>Multiple Region Redundancy</li>
<li>Backed by Townsend Security’s FIPS 140-2 compliant key manager, your keys are secured to industry standards.</li>
</ul>
<h4>Lockr is the first key management service for WordPress.</h4>
<p>More and more plugins are leveraging 3rd party APIs. To securely access these APIs, a token, secret key, or password is necessary. Until now, these highly sensitive secrets were stored right in your database. We’ve seen a major need to secure sensitive data and communications by removing these API keys from your database, encrypting them, and storing safely in an offsite key vault. This limits the damage that could be done if your site is compromised or a developer has a local copy of your database. Lockr makes key management easy. Just install the plugin for WordPress, configure your account and begin securely storing your keys. Lockr provides patches for the major plugins used by hundreds of thousands of sites and with WP-CLI a single command will make sure your plugins use Lockr.</p>
<h4>Who is Lockr for?</h4>
<p>Lockr is available for WordPress sites of all sizes. Easy to use for the novice site owner and advanced enough for the expert developer, Lockr secures web transactions and data at rest by protecting API and encryption keys.<br />
For Site Builders: fill out a single registration form and you’re set. To use with other plugins, look for those that have Lockr available or use our patch library to update your favorite plugin to use Lockr.<br />
For Developers: Lockr provides an easy to use framework to “get and set” keys from your custom plugin. Additionally, Lockr provides a simple to use yet strong AES-256 encryption function, ensuring your data is encrypted according to industry best-practices and securely stored. Using Lockr helps keep the developer safe, by removing the sensitive passwords and key secrets from the code and database, following security best practices should a site be compromised.</p>
<h4>Is Lockr Safe?</h4>
<p>Lockr can secure any API key, secret key, and other types of credentials. Once enabled in WordPress, keys entered are encrypted, then sent over to the Lockr system and removed from the code repository and database. This encryption teamed with hosting provider based authentication prevents your key from being used outside your website. Lockr also manages keys on a “per environment” basis which helps eliminate the potential of keys being shared from production to development environments. No longer will you have to worry about sending a notification from development to your production users, or having production data decrypted in development environments.</p>
<p>Leveraging proven enterprise-grade key management technology from Townsend Security, Lockr’s offsite key management delivers best-practice security to protect against critical vulnerabilities and help sites meet PCI DSS, HIPAA and other security requirements and regulations.</p>
<p>This plugin is designed, written and maintained by experts in security, to the end user it is easy to use and understand. Let Lockr handle the difficult part of securing your site, so you can focus on delivering the best experience possible to your users.</p>


Lockr

Lockr is the first API & Encryption key management service for WordPress, providing an affordable solution to secure secrets used by plugins.

Passwordless Authentication vs Lockr