Jono Alderson

Manage your website’s <code>.well-known</code> files with ease using this powerful yet simple plugin. The Well-Known File Manager provides a user-friendly interface to create, edit and manage standardized <code>.well-known</code> files – essential components for modern web security, app associations, and service discovery.
Whether you need to implement security.txt for vulnerability reporting, configure app associations, or set up protocol handlers, this plugin handles the technical complexities while giving you complete control. It creates actual files on your server for maximum compatibility and performance, without requiring any special server configuration or technical knowledge.
Perfect for developers, site owners, and administrators who want a reliable way to manage their site’s <code>.well-known</code> directory through a clean, intuitive WordPress interface.
Key Features:
<ul>
<li>Easy Management: Simple toggle switches to enable/disable <code>.well-known</code> files</li>
<li>Physical File Creation: Creates actual files in the <code>.well-known</code> directory for maximum compatibility</li>
<li>Content Editing: Built-in content editor for each file type with syntax highlighting</li>
<li>Default Templates: Pre-configured templates for common <code>.well-known</code> files</li>
<li>Validation: Content validation to ensure files meet required standards</li>
<li>Priority Files: Highlighted support for important files like <code>security.txt</code>, <code>assetlinks.json</code>, and <code>apple-app-site-association</code></li>
<li>Automatic Cleanup: Removes files when disabled to keep your server clean</li>
<li>Data Preservation: Files and settings are preserved when the plugin is deactivated or uninstalled</li>
</ul>
Supported Files:
<ul>
<li>Security Files: <code>security.txt</code>, <code>security-txt</code></li>
<li>App Associations: <code>assetlinks.json</code>, <code>apple-app-site-association</code></li>
<li>Protocol Handlers: <code>change-password</code>, <code>gpc</code>, <code>hoba</code></li>
<li>Discovery: <code>host-meta</code>, <code>host-meta.json</code>, <code>nodeinfo</code></li>
<li>Authentication: <code>openid-configuration</code>, <code>oauth-authorization-server</code></li>
<li>And many more…</li>
</ul>
How It Works:
This plugin takes a physical file approach rather than routing requests through WordPress:
<ul>
<li>When Enabled: Creates actual files in your <code>.well-known</code> directory</li>
<li>When Disabled: Removes the files from your server</li>
<li>No Server Configuration: Works on any hosting setup without requiring <code>.htaccess</code> modifications</li>
<li>Maximum Compatibility: Files are served directly by your web server for optimal performance</li>
</ul>
Benefits:
<ul>
<li>Universal Compatibility: Works on any hosting provider without special configuration</li>
<li>Better Performance: Files are served directly by the web server, not through WordPress</li>
<li>Simplified Setup: No need to configure rewrite rules or server settings</li>
<li>Automatic Management: Files are created and removed automatically based on your settings</li>
<li>Clean Server: Disabled files are completely removed from your server</li>
<li>Data Safety: Your files and settings remain intact when deactivating or uninstalling the plugin</li>
</ul>

Well-Known File Manager

Manage files in the .well-known directory with ease.

Matthias Pfefferle

Will Norris

WebFinger allows you to be discovered on the web using an identifier like <code>you@yourdomain.com</code> — similar to how email works, but for your online identity.
Why is this useful?
<ul>
<li>Fediverse & Mastodon: WebFinger is essential for federation. It allows Mastodon and other ActivityPub-powered platforms to find and follow your WordPress site.</li>
<li>Decentralized Identity: People can look you up using your WordPress domain, making your site the canonical source for your online identity.</li>
<li>Works with other plugins: This plugin provides the foundation that other plugins (like the ActivityPub plugin) build upon.</li>
</ul>
How it works:
When someone searches for <code>@you@yourdomain.com</code> on Mastodon or another federated service, their server asks your WordPress site: “Who is this person?” WebFinger answers that question by providing information about you and links to your profiles.
Technical details:
WebFinger is an open standard (<a href="http://tools.ietf.org/html/rfc7033" rel="nofollow ugc">RFC 7033</a>) that enables discovery of information about people and resources on the internet. It works by responding to requests at <code>/.well-known/webfinger</code> on your domain.

Well-Known File Manager vs WebFinger