Volodymyr Kolesnykov

This plugin adds support for WebAuthn into the <a href="https://wordpress.org/plugins/two-factor/" rel="ugc">Two Factor</a> plugin.
Because the U2F API <a href="https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A/m/yg20tsVFBAAJ" rel="nofollow ugc">is deprecated and will be removed in February 2022</a>, the plugin enables <a href="https://user-images.githubusercontent.com/7810770/150708968-3c331612-54ad-4373-9d36-6ec064301755.mp4" rel="nofollow ugc">seamless support</a> for the previously registered U2F security keys so that the users don’t have to re-register their keys and still be able to log in.
Notes:
<ul>
<li>please use <a href="https://github.com/sjinks/wp-two-factor-provider-webauthn/issues" rel="nofollow ugc">GitHub issues</a> to report bugs;</li>
<li>the full source code with all development files is available on <a href="https://github.com/sjinks/wp-two-factor-provider-webauthn" rel="nofollow ugc">GitHub</a>.</li>
</ul>

WebAuthn Provider for Two Factor

Thank you so much for this plugin!!  

In February 2022 Chrome changed things so hardware security keys would no longer work with the "Two Factor" plugin. Installing this add-on gets it working again. 

I had to change the "User Verification Requirement" to "Discouraged" in order to use my existing Yubikey (without re-adding it). Otherwise, it asked for a PIN but then wouldn't recognize my key.

Hopefully it can get merged directly into the Two Factor plugin soon? 😁🙏

Two Factor works with hardware keys again!

Thank you for bridging the gap while we wait for the PR. 
This is what Open Source is all about. 

FIDO U2F WebAuthn for Two Factor


This is helpful for evaluating purposes of the code. As this plugin is part of a security level all the code should be readable easily for auditors.



Besides that, well done.Thank you.


Works well for my use case but please provide unminified JS files.


This is great. You can literally log into WordPress with 2FA using one touch (password manager with auto-login combined with this for 2FA). Beats using an authenticator app any day.


One touch 2FA is a dream

WebAuthn authentication provider for Two Factor plugin.

Bobby karsono

ASD Passkey for WordPress, known as JWT EAuth outside the WordPress ecosystem, is a cutting-edge authentication service designed to enhance online security by replacing traditional passwords with advanced methods like biometrics (fingerprint, facial recognition) or hardware security keys. As cyber threats become increasingly sophisticated, password-based systems are more vulnerable to attacks such as phishing, credential stuffing, and data breaches.
With JWT EAuth, businesses can adopt a modern, secure solution that not only protects data but also improves user experience.
Key Benefits: 
* Enhanced security with passwordless login. 
* Improved user experience with biometric and hardware key support. 
* Builds trust through advanced encryption and anti-phishing technology.
Major features: 
* Seamless integration without additional API settings. 
* Standard passkey and asymmetric encryption support. 
* Corporate SMTP support for email notifications (pro). 
* Customizable email templates (pro). 
* Supports login using FedCM (pro).
<h3>Privacy</h3>
This plugin respects user privacy and follows best practices for data protection. Below are the details regarding how user data is handled when using this plugin:
<ol>
<li>
Data Collected:
<ul>
<li>Email or username: Used to initiate the passkey-based authentication process.</li>
<li>Public key: Generated by the user’s device during registration and stored securely on the server.</li>
<li>Authentication challenge: Temporarily generated for login verification.</li>
</ul>
</li>
<li>
External Servers:
<ul>
<li>The plugin communicates with the server at <code>https://passwordless.alciasolusidigital.com/landing/privacyPolicy</code> for the purpose of authentication and verification. No sensitive data such as passwords are sent or stored on external servers.</li>
</ul>
</li>
<li>
User Consent:
<ul>
<li>The plugin requires explicit user consent before any data is processed or sent. This is done via an opt-in method during registration.</li>
</ul>
</li>
<li>
Third-Party Services:
<ul>
<li>This plugin does not share data with unauthorized third parties.</li>
<li>Any third-party integrations are optional and clearly documented.</li>
</ul>
</li>
</ol>
For detailed information on the plugin’s privacy practices, please visit: 
<a href="https://passwordless.alciasolusidigital.com/landing/privacyPolicy" rel="nofollow ugc">Privacy Policy</a>

ASD Passkey Login

Advanced passkey and passwordless platform with anti-phishing features, offering secure authentication for WordPress and WooCommerce (pro).

WebAuthn Provider for Two Factor vs ASD Passkey Login