Volodymyr Kolesnykov

This plugin adds support for WebAuthn into the <a href="https://wordpress.org/plugins/two-factor/" rel="ugc">Two Factor</a> plugin.
Because the U2F API <a href="https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A/m/yg20tsVFBAAJ" rel="nofollow ugc">is deprecated and will be removed in February 2022</a>, the plugin enables <a href="https://user-images.githubusercontent.com/7810770/150708968-3c331612-54ad-4373-9d36-6ec064301755.mp4" rel="nofollow ugc">seamless support</a> for the previously registered U2F security keys so that the users don’t have to re-register their keys and still be able to log in.
Notes:
<ul>
<li>please use <a href="https://github.com/sjinks/wp-two-factor-provider-webauthn/issues" rel="nofollow ugc">GitHub issues</a> to report bugs;</li>
<li>the full source code with all development files is available on <a href="https://github.com/sjinks/wp-two-factor-provider-webauthn" rel="nofollow ugc">GitHub</a>.</li>
</ul>

WebAuthn Provider for Two Factor

Thank you so much for this plugin!!  

In February 2022 Chrome changed things so hardware security keys would no longer work with the "Two Factor" plugin. Installing this add-on gets it working again. 

I had to change the "User Verification Requirement" to "Discouraged" in order to use my existing Yubikey (without re-adding it). Otherwise, it asked for a PIN but then wouldn't recognize my key.

Hopefully it can get merged directly into the Two Factor plugin soon? 😁🙏

Two Factor works with hardware keys again!

Thank you for bridging the gap while we wait for the PR. 
This is what Open Source is all about. 

FIDO U2F WebAuthn for Two Factor


This is helpful for evaluating purposes of the code. As this plugin is part of a security level all the code should be readable easily for auditors.



Besides that, well done.Thank you.


Works well for my use case but please provide unminified JS files.


This is great. You can literally log into WordPress with 2FA using one touch (password manager with auto-login combined with this for 2FA). Beats using an authenticator app any day.


One touch 2FA is a dream

WebAuthn authentication provider for Two Factor plugin.

Mohamed Endisha

Secure Passkeys is a powerful WordPress plugin that enables seamless passwordless authentication using WebAuthn technology. By eliminating the need for traditional passwords, it enhances security and improves the user login experience. With support for biometric authentication, security keys, and device-bound credentials, Secure Passkey provides a robust and user-friendly solution for modern authentication.
Unlike traditional password-based authentication, Secure Passkey leverages cryptographic key pairs to ensure secure logins. The private key remains securely stored on the user’s device, while the public key is registered with the WordPress site. This method protects against phishing attacks and password breaches, ensuring that only authorized users can gain access.
Secure Passkeys integrates effortlessly into WordPress, allowing users to register and manage their passkeys from their profile settings. Once registered, users can log in using their fingerprint, face recognition, or a hardware security key without the need to remember or enter a password.
<h3>Features</h3>
<ul>
<li>Passwordless Login: Secure authentication via WebAuthn with biometric devices, security keys, Touch ID, Face ID, and more.</li>
<li>Enhanced User Experience: Password-free login for a smoother user journey.</li>
<li>Integration Support:
<ul>
<li>WordPress default login form</li>
<li>WooCommerce login page</li>
<li>MemberPress login form</li>
<li>Easy Digital Downloads login form</li>
<li>Ultimate Member login form</li>
</ul>
</li>
<li>Admin Management: Administrators can delete, activate, or deactivate users directly from plugin settings or user profiles.</li>
<li>Passkeys Reminder Notice: New option to enable or disable the passkeys reminder notice in the WordPress admin area for users who have not yet enabled passkeys.</li>
<li>Activity Logging: Monitor activity logs and track last login/registration of passkeys.</li>
<li>Multiple Passkeys: Supports multiple passkey registrations per user, with the option to set a registration limit or allow unlimited registrations.</li>
<li>Role Restrictions: Restrict and exclude specific user roles from using passkey authentication.</li>
<li>Customizable Settings: Adjust timeout settings for passkey registration and login.</li>
<li>User Verification: Enforce user verification for enhanced security.</li>
<li>Frontend Customization: Easily customize frontend themes or add your own with basic frontend skills.</li>
<li>Theme Support: Supports pre-built themes like YOOtheme (UIkit) for frontend shortcodes.</li>
<li>Shortcodes: Embed passkey login and registration forms on custom frontend pages.</li>
<li>Passkey Display: Show passkey details in admin user lists and profiles.</li>
<li>Multisite: Supports WordPress Multisite and single-site installations.</li>
<li>Database Optimization: Option to allow or disallow automatic deletion of old challenge records and activity logs (configurable schedule).</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or newer.</li>
<li>PHP version 7.4 or newer.</li>
</ul>
<h3>License</h3>
Secure Passkeys is licensed under the GNU General Public License v2 or later.

Secure Passkeys


This is the best Passkey plugin for WP that I have ever used! Absolutely amazing work! Thank you !!


Awesome!!!!

Perfect - lightweight, simple and free

Secure Passkeys is a powerful WordPress plugin that enables passwordless authentication using WebAuthn technology.

WebAuthn Provider for Two Factor vs Secure Passkeys