ZevoST

<p>ZevoST Login enhances the WordPress login experience with three powerful features:</p>
<p><strong>Passkey Passwordless Login</strong></p>
<ul>
<li>WebAuthn-based passkey authentication</li>
<li>Supports Face ID, Touch ID, Windows Hello, and other biometric authenticators</li>
<li>Users can manage multiple passkeys from their profile page</li>
<li>Supports ES256 and RS256 credentials</li>
<li>Option to disable password login entirely</li>
</ul>
<p><strong>Login Page Customization</strong></p>
<ul>
<li>Modern card-style login interface</li>
<li>Customizable logo, background color, button color, and more</li>
<li>Custom CSS support</li>
<li>Responsive design</li>
</ul>
<p><strong>Social Login (Optional)</strong></p>
<ul>
<li>Integrates with Zhiwo Cloud aggregated social login (u.zevost.com)</li>
<li>Supports 14 platforms: QQ, WeChat, Alipay, Weibo, Baidu, Douyin, Huawei, Xiaomi, Google, Microsoft, Twitter, DingTalk, Gitee, and GitHub</li>
<li>Auto-register new users on first social login</li>
<li>Flexible callback URL configuration</li>
<li>Users can bind/unbind social accounts from their profile page</li>
</ul>
<h3>Shortcodes</h3>
<p>ZevoST Login provides two shortcodes for embedding login buttons anywhere on your site (e.g. custom login pages, sidebars, or page builders):</p>
<p><strong>[zevost_passkey_button]</strong><br />
Renders the Passkey login button.</p>
<p><strong>[zevost_social_buttons]</strong><br />
Renders the social login button group. Requires social login to be enabled and configured in settings.</p>
<p>Example usage:</p>
<pre><code>[zevost_passkey_button]
[zevost_social_buttons]<h3>Source Code</h3>
</code></pre>
<p>This plugin is open source. The source code is available on GitHub:<br />
https://github.com/Zevo77/zevost-login</p>
<p>Bug reports and pull requests are welcome.</p>


ZevoST Login

Passkey passwordless login, login page customization, and social login for WordPress.

susheelhbti

<p><strong>Keyless Login</strong> brings modern, phishing-resistant authentication to your WordPress site.</p>
<p>Log in with your fingerprint, face, or a hardware security key — no password ever required or transmitted. Implemented entirely in pure PHP using only the built-in <code>openssl</code> extension. No Composer, no vendor folder, no third-party libraries.</p>
<h4>How It Works</h4>
<p>KeylessWP implements the <a href="https://www.w3.org/TR/webauthn-2/" rel="nofollow ugc">W3C WebAuthn Level 2</a> specification from scratch:</p>
<ul>
<li>A custom CBOR decoder parses authenticator data</li>
<li>Custom ASN.1/DER builders construct public keys</li>
<li>PHP’s built-in <code>openssl_verify()</code> verifies ECDSA P-256 (ES256) and RSA-2048 (RS256) signatures</li>
<li>Credentials are stored in a dedicated database table with sign-count clone detection</li>
</ul>
<h4>Supported Authentication Methods</h4>
<ul>
<li>🖐 Fingerprint sensors (Touch ID, Windows Hello)</li>
<li>😊 Face recognition (Face ID, Windows Hello face camera)</li>
<li>🔑 Hardware security keys (YubiKey, Google Titan Key, Feitian)</li>
<li>🔐 Platform passkey managers (iCloud Keychain, Google Password Manager)</li>
</ul>
<h4>Features</h4>
<ul>
<li>Full FIDO2 / WebAuthn Level 2 implementation — pure PHP</li>
<li>ECDSA P-256 (ES256) and RSA-2048 (RS256) signature verification</li>
<li>Zero external libraries — only PHP’s built-in <code>openssl</code> extension required</li>
<li>Passkey registration and management from the user profile page</li>
<li>Per-credential device naming, creation date, and last-used tracking</li>
<li>Sign-count verification on every authentication (clone detection)</li>
<li>Phishing-resistant: credentials are cryptographically bound to your domain</li>
<li>Admin settings page with live usage statistics</li>
<li>Graceful fallback: the standard password form remains available</li>
<li>Translatable — all strings use <code>__()</code> with the <code>keylesswp</code> text domain</li>
</ul>
<h4>Privacy</h4>
<p>KeylessWP does not collect, transmit, or share any user data. No external services are contacted. Biometric data never leaves the user’s device — only a cryptographic public key is stored on the server.</p>


Keyless Login

Passwordless WebAuthn/FIDO2 login for WordPress. 100% pure PHP, zero external dependencies.

ZevoST Login vs Keyless Login