Jakub Klapka

This plugin adds new status for posts (or pages/custom post types) called “Secured with link”. If you select this status, that specific post wouldn’t be accessible on its standard URL anymore, but you have to access it on URL with random token in it. This URL is displayed on post edit screen in administration.
<h4>Configuration</h4>
For now, there is no administration screen yet. To configure plugin, you can inject your changes to plugin configuration array from your theme or plugin. Just put this code into functions.php file in your theme:
<pre><code>add_filter( 'lumi.secure_post_with_link.config', function( $config ){
 $config[ 'allowed_post_types' ] = [ 'post', 'page' ];
 $config[ 'url_identifier' ] = 'sec';
 // ... Other $config variables
 return $config;
} );
</code></pre>
Preferably, don’t include lines with attributes, which you don’t want to change.
These are attributes (with defaults), which you can change this way:
<ul>
<li>
allowed_post_types ([ ‘post’ ]) List of post types, which should be affected by this plugin. Use array notation like: <code>[ 'post', 'page', 'custom_type' ]</code>.
</li>
<li>
secured_meta_name (‘_secured_with_link_token’) Name of meta, which stores post token. You can change that in case of conflicts with themes or other plugins.
</li>
<li>
url_identifier (‘s’) Part of URL before token, which identifies secured posts.
</li>
<li>
token_length (4) Length of random token. With default generator, length is in bytes!
</li>
<li>
use_openssl (true) If plugin should use cryptographically secure random generator, or less-secure PHP functions. (See below)
</li>
<li>
assets_url (Defaults to [plugin URL]/assets) URL for static assets (like Javascripts), in case, you want to use your assets for some reason.
</li>
<li>
translations_dir (Defaults to [Plugin path]/lang) You can change path, where plugin looks for translation files. If you want to translate plugin, you should not use this setting, but create standard translation in wp-content/languages folder.
</li>
</ul>
In case, you have changed any settings after plugin installation, deactivate and reactivate plugin, so all changes are correctly applied.
<h4>Compatibility</h4>
<ul>
<li>For now, you need to use WP URL Rewriting for plugin to work correctly</li>
<li>Plugin should work with PHP 5.4, but at least PHP 5.6 is highly recommended. I’m sorry, but I won’t support older, insecure and slow versions of PHP.</li>
<li>By default, plugin uses OpenSSL library to generate cryptographically secure random tokens. If your hosting provider don’t have OpenSSL set up, you can use configuration variable: <code>$config[ 'use_openssl' ] = false</code> to use less-secure method of token generating. This should still be secure enough for most use cases.</li>
</ul>
<h4>Planned features</h4>
<ul>
<li>Administration page</li>
<li>Regenerate token</li>
<li>Role management – users with privileges should be able to access post without token</li>
</ul>
<h4>Developers</h4>
Plugin is also hosted on <a href="https://github.com/jakub-klapka/wp-secure-post-with-link" rel="nofollow ugc">Github</a>.

Secure post with link

Adds new post status "Secured with Link". Posts with this status will be accessible only with randomly generated token in URL.

Mohamed Endisha

Secure Passkeys is a powerful WordPress plugin that enables seamless passwordless authentication using WebAuthn technology. By eliminating the need for traditional passwords, it enhances security and improves the user login experience. With support for biometric authentication, security keys, and device-bound credentials, Secure Passkey provides a robust and user-friendly solution for modern authentication.
Unlike traditional password-based authentication, Secure Passkey leverages cryptographic key pairs to ensure secure logins. The private key remains securely stored on the user’s device, while the public key is registered with the WordPress site. This method protects against phishing attacks and password breaches, ensuring that only authorized users can gain access.
Secure Passkeys integrates effortlessly into WordPress, allowing users to register and manage their passkeys from their profile settings. Once registered, users can log in using their fingerprint, face recognition, or a hardware security key without the need to remember or enter a password.
<h3>Features</h3>
<ul>
<li>Passwordless Login: Secure authentication via WebAuthn with biometric devices, security keys, Touch ID, Face ID, and more.</li>
<li>Enhanced User Experience: Password-free login for a smoother user journey.</li>
<li>Integration Support:
<ul>
<li>WordPress default login form</li>
<li>WooCommerce login page</li>
<li>MemberPress login form</li>
<li>Easy Digital Downloads login form</li>
<li>Ultimate Member login form</li>
</ul>
</li>
<li>Admin Management: Administrators can delete, activate, or deactivate users directly from plugin settings or user profiles.</li>
<li>Passkeys Reminder Notice: New option to enable or disable the passkeys reminder notice in the WordPress admin area for users who have not yet enabled passkeys.</li>
<li>Activity Logging: Monitor activity logs and track last login/registration of passkeys.</li>
<li>Multiple Passkeys: Supports multiple passkey registrations per user, with the option to set a registration limit or allow unlimited registrations.</li>
<li>Role Restrictions: Restrict and exclude specific user roles from using passkey authentication.</li>
<li>Customizable Settings: Adjust timeout settings for passkey registration and login.</li>
<li>User Verification: Enforce user verification for enhanced security.</li>
<li>Frontend Customization: Easily customize frontend themes or add your own with basic frontend skills.</li>
<li>Theme Support: Supports pre-built themes like YOOtheme (UIkit) for frontend shortcodes.</li>
<li>Shortcodes: Embed passkey login and registration forms on custom frontend pages.</li>
<li>Passkey Display: Show passkey details in admin user lists and profiles.</li>
<li>Multisite: Supports WordPress Multisite and single-site installations.</li>
<li>Database Optimization: Option to allow or disallow automatic deletion of old challenge records and activity logs (configurable schedule).</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or newer.</li>
<li>PHP version 7.4 or newer.</li>
</ul>
<h3>License</h3>
Secure Passkeys is licensed under the GNU General Public License v2 or later.

Secure Passkeys


This is the best Passkey plugin for WP that I have ever used! Absolutely amazing work! Thank you !!


Awesome!!!!

Perfect - lightweight, simple and free

Secure Passkeys is a powerful WordPress plugin that enables passwordless authentication using WebAuthn technology.

Secure post with link vs Secure Passkeys