WP Busters

<h4>Use your glance or fingerprint using Touch ID or Face ID for easy and secure access.</h4>
<p>Improve your authentication security; you do not need a password.<br />
When you enable Passwordless WP on your site, you can log in with a simple action.</p>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/ZdhW089h69w?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<p>The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public-key cryptography instead of a password.</p>
<h4>Safe facial or fingerprint data</h4>
<p>The plugin recieves data which is provided by the device, your deivce tells the plugin if your person was recognized or not. It does not store your data, only token will be stored in WordPress without the ability to use it. It’s useless data without your physical access to the device.</p>
<h4>Focus on User Experience</h4>
<p>We follow the standard WordPress UX login page together with common-used elements to make using comfortable with a minimal footprint. Login and attach your device and passwordless login will available for the next login.</p>
<h4>FIDO 2 + WebAuthn</h4>
<p>WebAuthn was officially recognized as a W3C web standard in March 2019. Web Authentication is a new standard enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users using hardware authenticators.</p>
<h4>GDPR Safe</h4>
<p>The web standard was created from the outset with a “privacy by design” approach and are a strong fit for GDPR compliance. Crucially, the plugin delivers authentication with no third-party involvement or tracking between accounts. And when it comes to biometrics, FIDO and WebAuthn standards prevent this information from being stored and matched in servers – it never leaves the user’s device do not allow for any biometric data to be captured.</p>
<h4>Browsers Supports</h4>
<p>Passwordless WP is currently supported in Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari web browsers on iOS 14 and BigSur, as well as Windows 10 and Android platforms.</p>
<p>Passwordless WP requires HTTPS and SSL secure connection or localhost/127.0.0.1 environment. It supports only platform authenticator like Touch ID, Face ID, Windows Hello, Fingerprint and etc.</p>
<h4>Help with ideas and testing</h4>
<p>If you want to discuss and suggest any new ideas,<br />
Join to Early Access Team group here: https://www.facebook.com/groups/676882319616540/</p>
<p>Trademark notices</p>
<p>Registered trademarks and service marks are the property of their respective owners.</p>
<p>Apple, Face ID, iPad, iPhone, Mac, macOS, Safari, and Touch ID are trademarks of Apple Inc., registered in the U.S. and other countries.</p>
<p>Android, Chrome, Google, Google Chrome are trademarks of Google, Inc.</p>
<p>Microsoft, Windows are registered trademarks of Microsoft Corporation in the United States and other countries.</p>
<p>Contributing</p>
<p>You can contribute or see sources to this plugin on <a href="https://github.com/WP-Busters/passwordless-wp" rel="nofollow ugc">GitHub</a>.</p>


Passwordless WP – Login with your glance or fingerprint

I have been waiting for this. This is how devices started getting rid of passwords. Then some native phone apps followed. Now to web apps and WordPress. This is the future.

Perfect and elegant

Use your glance or fingerprint using Touch ID or Face ID for easy and secure access. Improve your authentication security, you do not need a password.

TrustedLogin

<p>The easiest and safest way to restrict access to your WordPress site’s Dashboard and administrative menus. Remove Dashboard Access is a lightweight plugin that automatically redirects users who shouldn’t have access to the Dashboard to a custom URL of your choosing. Redirects can also be configured on a per-role/per-capability basis, allowing you to keep certain users out of the Dashboard, while retaining access for others.</p>
<ul>
<li>Limit Dashboard access to user roles:
<ul>
<li>Admins only</li>
<li>Admins + editors</li>
<li>Admins, editors, and authors</li>
<li>or restrict by specific user capability</li>
</ul>
</li>
<li>Choose your own redirect URL</li>
<li>Optionally allow users to edit their profiles</li>
<li>Display a message on the login screen so users know why they’re being redirected</li>
<li>Allow specific admin pages through the redirect — paste a list of URLs your customers should still be able to reach (with wildcard support for grouping related pages)</li>
<li>Optionally extend the block to <code>admin-ajax.php</code> requests for stricter lockdown</li>
</ul>
<p>Blocking access to the Dashboard is a great way to prevent clients from breaking their sites, prevent users from seeing things they shouldn’t, and to keep your site’s backend more secure.</p>
<p><strong>Allow only users with roles or capabilities:</strong></p>
<p>You can restrict Dashboard access to Admins only, Editors or above, Authors or above, or by selecting a specific user capability.</p>
<p><strong>Grant access to user profiles:</strong></p>
<p>Optionally allow all users the ability to edit their profiles in the Dashboard. Users lacking the chosen capability won’t be able to access any other sections of the Dashboard.</p>
<p><strong>Show a custom login message:</strong></p>
<ul>
<li>Supply a message to display on the login screen. Leaving this blank disables the message.</li>
</ul>
<p><strong>Allow specific admin pages through the redirect:</strong></p>
<p>Sometimes you want to lock down the Dashboard but still let your customers reach one or two specific admin pages — a payment confirmation, a <a href="https://www.trustedlogin.com/" rel="nofollow ugc">TrustedLogin</a> secret-share screen, a custom report. Paste those URLs into the Allowed URLs box (one per line, relative or absolute), and matching requests will skip the redirect.</p>
<p>Use <code>*</code> as a wildcard inside a query value to match a whole group of pages at once. For example, <code>?page=tl-*</code> allows <code>tl-secrets</code>, <code>tl-config</code>, and any other page whose slug starts with <code>tl-</code>.</p>
<p><strong>Optionally block AJAX requests too:</strong></p>
<p>By default this plugin doesn’t touch requests to <code>admin-ajax.php</code> — most WordPress sites rely on those for legitimate frontend AJAX. If you’d rather the dashboard restriction apply there as well, turn on the “Also block AJAX” checkbox in the Advanced section of the settings page.</p>


Remove Dashboard Access

This plugin is a must-have when working with public roles.

A must-have!

Disable Dashboard access for users of a specific role or capability. Disallowed users are redirected to a chosen URL. Get set up in seconds.

Passwordless WP – Login with your glance or fingerprint vs Remove Dashboard Access