WP Busters

<h4>Use your glance or fingerprint using Touch ID or Face ID for easy and secure access.</h4>
<p>Improve your authentication security; you do not need a password.<br />
When you enable Passwordless WP on your site, you can log in with a simple action.</p>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/ZdhW089h69w?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<p>The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public-key cryptography instead of a password.</p>
<h4>Safe facial or fingerprint data</h4>
<p>The plugin recieves data which is provided by the device, your deivce tells the plugin if your person was recognized or not. It does not store your data, only token will be stored in WordPress without the ability to use it. It’s useless data without your physical access to the device.</p>
<h4>Focus on User Experience</h4>
<p>We follow the standard WordPress UX login page together with common-used elements to make using comfortable with a minimal footprint. Login and attach your device and passwordless login will available for the next login.</p>
<h4>FIDO 2 + WebAuthn</h4>
<p>WebAuthn was officially recognized as a W3C web standard in March 2019. Web Authentication is a new standard enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users using hardware authenticators.</p>
<h4>GDPR Safe</h4>
<p>The web standard was created from the outset with a “privacy by design” approach and are a strong fit for GDPR compliance. Crucially, the plugin delivers authentication with no third-party involvement or tracking between accounts. And when it comes to biometrics, FIDO and WebAuthn standards prevent this information from being stored and matched in servers – it never leaves the user’s device do not allow for any biometric data to be captured.</p>
<h4>Browsers Supports</h4>
<p>Passwordless WP is currently supported in Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari web browsers on iOS 14 and BigSur, as well as Windows 10 and Android platforms.</p>
<p>Passwordless WP requires HTTPS and SSL secure connection or localhost/127.0.0.1 environment. It supports only platform authenticator like Touch ID, Face ID, Windows Hello, Fingerprint and etc.</p>
<h4>Help with ideas and testing</h4>
<p>If you want to discuss and suggest any new ideas,<br />
Join to Early Access Team group here: https://www.facebook.com/groups/676882319616540/</p>
<p>Trademark notices</p>
<p>Registered trademarks and service marks are the property of their respective owners.</p>
<p>Apple, Face ID, iPad, iPhone, Mac, macOS, Safari, and Touch ID are trademarks of Apple Inc., registered in the U.S. and other countries.</p>
<p>Android, Chrome, Google, Google Chrome are trademarks of Google, Inc.</p>
<p>Microsoft, Windows are registered trademarks of Microsoft Corporation in the United States and other countries.</p>
<p>Contributing</p>
<p>You can contribute or see sources to this plugin on <a href="https://github.com/WP-Busters/passwordless-wp" rel="nofollow ugc">GitHub</a>.</p>


Passwordless WP – Login with your glance or fingerprint

I have been waiting for this. This is how devices started getting rid of passwords. Then some native phone apps followed. Now to web apps and WordPress. This is the future.

Perfect and elegant

Use your glance or fingerprint using Touch ID or Face ID for easy and secure access. Improve your authentication security, you do not need a password.

softaculous

pagelayer

loginizer

<p>Loginizer is a WordPress plugin which helps you fight against bruteforce attack by blocking login for the IP after it reaches maximum retries allowed. You can blacklist or whitelist IPs for login using Loginizer. You can use various other features like Two Factor Auth, reCAPTCHA, PasswordLess Login, etc. to improve security of your website.</p>
<p>Loginizer is actively used by more than 1000000+ WordPress websites.</p>
<p>You can find our official documentation at <a href="https://loginizer.com/docs" rel="nofollow ugc">https://loginizer.com/docs</a>. We are also active in our community support forums on <a href="https://wordpress.org/support/plugin/loginizer" rel="ugc">wordpress.org</a> if you are one of our free users. Our Premium Support Ticket System is at <a href="https://loginizer.deskuss.com" rel="nofollow ugc">https://loginizer.deskuss.com</a></p>
<p>Free Features :</p>
<ul>
<li>Brute force protection. IPs trying to brute force your website will be blocked for 15 minutes after 3 failed login attempts. After multiple lockouts the IP is blocked for 24 hours. This is the default configuration and can be changed from Loginizer -> Brute force page in WordPress admin panel.</li>
<li>Failed login attempts logs.</li>
<li>Blacklist IPs</li>
<li>Whitelist IPs</li>
<li>Custom error messages on failed login.</li>
<li>Permission check for important files and folders.</li>
<li>Allow only Trusted IP.</li>
<li>Blocked Screen in place of the Login page.</li>
<li>Email Notification on successful login.</li>
<li>Let users login with LinkedIn</li>
</ul>
<h4>Get Support and Pro Features</h4>
<p>Get professional support from our experts and pro features to take your site’s security to the next level with <a href="https://loginizer.com/pricing" rel="nofollow ugc">Loginizer-Security</a>.</p>
<p>Pro Features :</p>
<ul>
<li>MD5 Checksum – of Core WordPress Files. The admin can check and ignore files as well.</li>
<li>PasswordLess Login – At the time of Login, the username / email address will be asked and an email will be sent to the email address of that account with a temporary link to login.</li>
<li>Two Factor Auth via Email – On login, an email will be sent to the email address of that account with a temporary 6 digit code to complete the login.</li>
<li>Two Factor Auth via App – The user can configure the account with a 2FA App like Google Authenticator, Authy, etc.</li>
<li>Login Challenge Question – The user can setup a Challenge Question and Answer as an additional security layer. After Login, the user will need to answer the question to complete the login.</li>
<li>reCAPTCHA – Google’s reCAPTCHA v3/v2, Cloudflare Turnstile, hCAPTCHA can be configured for the Login screen, Comments Section, Registration Form, etc. to prevent automated brute force attacks. Supports WooCommerce as well.</li>
<li>Rename Login Page – The Admin can rename the login URL (slug) to something different from wp-login.php to prevent automated brute force attacks.</li>
<li>Rename WP-Admin URL – The Admin area in WordPress is accessed via wp-admin. With loginizer you can change it to anything e.g. site-admin</li>
<li>CSRF Protection – This helps in preventing CSRF attacks as it updates the admin URL with a session string which makes it difficult and nearly impossible for the attacker to predict the URL.</li>
<li>Rename Login with Secrecy – If set, then all Login URL’s will still point to wp-login.php and users will have to access the New Login Slug by typing it in the browser.</li>
<li>Disable XML-RPC – An option to simply disable XML-RPC in WordPress. Most of the WordPress users don’t need XML-RPC and can disable it to prevent automated brute force attacks.</li>
<li>Rename XML-RPC – The Admin can rename the XML-RPC to something different from xmlrpc.php to prevent automated brute force attacks.</li>
<li>Username Auto Blacklist – Attackers generally use common usernames like admin, administrator, or variations of your domain name / business name. You can specify such username here and Loginizer will auto-blacklist the IP Address(s) of clients who try to use such username(s).</li>
<li>New Registration Domain Blacklist – If you would like to ban new registrations from a particular domain, you can use this utility to do so.</li>
<li>Change the Admin Username – The Admin can rename the admin username to something more difficult.</li>
<li>Auto Blacklist IPs – IPs will be auto blacklisted, if certain usernames saved by the Admin are used to login by malicious bots / users.</li>
<li>Disable Pingbacks – Simple way to disable PingBacks.</li>
<li>SSO – Single Sign-on, let any user access to your WordPress Dashboard without the need to share username or password.</li>
<li>Limit Concurrent Logins – It prevents user to login from different devices concurrently, you can define how many devices you want to allow, and how you want to restrict the user when concurrent limit is reached.</li>
<li>Social Login – Users can login or register with their Google, Github, Facebook, X (Twitter), Discord, Twitch, LinkedIn, Microsoft with support for WooCommerce and Ultimate Member.</li>
<li>Key Less Social Login – Use Loginizer’s Social Auth for easy key less Social login configuration, now supports Google, GitHub, X, LinkedIn more to be added later</li>
<li>Country Blocking – Block IPs from specific countries to restrict access to your website.</li>
</ul>
<p>Features in Loginizer include:</p>
<ul>
<li>Blocks IP after maximum retries allowed</li>
<li>Extended Lockout after maximum lockouts allowed</li>
<li>Email notification to admin after max lockouts</li>
<li>Blacklist IP/IP range</li>
<li>Whitelist IP/IP range</li>
<li>Check logs of failed attempts</li>
<li>Create IP ranges</li>
<li>Delete IP ranges</li>
<li>Licensed under LGPLv2.1</li>
<li>Safe & Secure</li>
</ul>


Loginizer

Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.

Passwordless WP – Login with your glance or fingerprint vs Loginizer