Jafran Hasan

iclanzan

I have created this plugin because it is of great use to me and I hope it will be of use to others but it might break things. Please use it with caution and at your own risk. If you find bugs please get in touch with me or better yet help fix it on <a href="https://github.com/iclanzan/Passwordless" title="Passwordless on GitHub" rel="nofollow ugc">GitHub</a>.
<h4>Login process</h4>
Passwordless allows your site’s users to log in using only their email addresses. After submitting the login form with the email address filled in, the user will receive an email containing a login link which can only be used once. Clicking that link results in the user getting logged in for one year or until he logs out. Unused login links expire after one day.
<h4>New users</h4>
New users will have accounts created for them automatically when they try to log in for the first time. In this case their email will also act as the username. Their visible name will be set to ‘Annonymous’ but can obviously be changed on the profile page.
<h4>Login page</h4>
The plugin changes the login page URI to <code>example.com/login</code> from the default <code>example.com/wp-login.php</code>. If permalinks are disabled the login page will instead be <code>example.com/?login</code>.
The page can be customized using some of the same filters and action hooks that the original login page used. If a total overhaul of the page is desired, placing a <code>login.php</code> template file in the currently active theme directory will override the plugin’s login page.
<h4>Filters</h4>
I have included some new filter hooks to make it easy to change important aspects of the plugin’s inner workings.
<pre><code>passwordless_login_page applied to the login page URI. Filter function argument: string containing the login page URI. passwordless_pass_length applied to the length of the generated passwords/keys. Filter function argument: integer representing the number of characters. passwordless_key_expire applied to the number of seconds a login key is valid for. Filter function argument: integer number of seconds. passwordless_login_redirect applied to the URI where a user is sent after logging in. Filter function arguments: string URI, integer user id. passwordless_email_subject applied to the subject of the email that gets sent to users logging in. Filter function arguments: string email subject, string email address. passwordless_email_body applied to the body of the email that gets sent to users logging in. Filter function arguments: string email body, string email address. </code></pre>

Passwordless

Passwordless allows users to sign up and log in using only email addresses, removing the need for them to remember yet another password.

Ateeq

Easy Secure Login enhances your site’s security by integrating two powerful Google authentication methods: Google Sign-In and Google One Tap. It can optionally replace the standard WordPress password system entirely, offering a modern, passwordless login experience.
Born out of necessity after a real-world brute-force attack, this plugin was designed with the option to enforce a Google-only login policy, ensuring that only verified Google accounts can access your site. It combines robust, Google-powered security with a beautiful user interface, automatic user management, and a step-by-step setup wizard.
<h3>Key Features</h3>
<ul>
<li>Optional Passwordless Security: Ability to completely disable standard password logins, forcing all users to authenticate via Google’s secure OAuth 2.0.</li>
<li>Role-Based Redirects: Define custom landing pages for different user roles. Redirect subscribers to your homepage or a custom dashboard while keeping admins in wp-admin.</li>
<li>Google Sign-In Button: A clean, modern “Continue with Google” button on your login page.</li>
<li>Google One Tap: Allows logged-in Google users to sign in instantly with a single click via a non-intrusive pop-up.</li>
<li>Complete User Management: Whitelist specific Google accounts and assign roles, or allow open registration for any Google user.</li>
<li>Google Profile Picture Sync: Automatically syncs and displays Google profile pictures as user avatars in WordPress.</li>
<li>Built-in Security Hardening:
<ul>
<li>Disable XML-RPC to prevent common attacks.</li>
<li>Disable the plugin and theme file editor.</li>
<li>Hide your WordPress version number.</li>
<li>Restrict REST API access to logged-in users.</li>
<li>Block direct access to sensitive core files.</li>
</ul>
</li>
<li>User-Friendly Setup Wizard: A clean, multi-step guide to get your Google Cloud credentials configured in minutes.</li>
<li>Actively Maintained for the latest WordPress versions.</li>
</ul>
This plugin provides maximum login security while dramatically improving the user experience.
<h3>External services</h3>
This plugin uses Google’s Identity Services to provide a secure authentication method (Google Sign-In and Google One Tap). To function, it connects to several Google APIs.
<ul>
<li>Service: Google Identity Services (accounts.google.com)</li>
<li>Purpose: This service is used to display the “Sign in with Google” button and the Google One Tap prompt. It handles the user authentication process directly in the user’s browser.</li>
<li>Data Sent: This plugin initiates the authentication flow, but user data (like email and password) is entered directly on Google’s domain, not through this plugin. The plugin only receives a secure authentication token from Google after a successful login.</li>
<li>
Terms and Policies:
<ul>
<li>Google Terms of Service: https://policies.google.com/terms</li>
<li>Google Privacy Policy: https://policies.google.com/privacy</li>
</ul>
</li>
<li>
Service: Google OAuth & People APIs (oauth2.googleapis.com, www.googleapis.com)
</li>
<li>Purpose: After a user authenticates, the plugin’s server sends the received authentication token/code to these Google APIs to verify its authenticity and retrieve basic user profile information (email, name, profile picture).</li>
<li>Data Sent: An authentication token/code provided by Google is sent from your server to Google’s servers for validation.</li>
<li>Terms and Policies:
<ul>
<li>Google APIs Terms of Service: https://developers.google.com/terms</li>
</ul>
</li>
</ul>

Easy Secure Login – Google One Tap & Sign-In

Eliminate passwords and secure your site with Google. This plugin replaces WordPress login with a secure Google Sign-In button and frictionless Google …

Passwordless vs Easy Secure Login – Google One Tap & Sign-In