Skip to content

This Plugin brings the next generation of login security to WordPress. With Passkeys, users can log in using biometric authentication (Touch ID, Face ID) or their device’s security keys—no passwords required.

License

Notifications You must be signed in to change notification settings

multidots/multidots-passkey-login

Repository files navigation

Multidots Passkey Login – Passwordless Login for WordPress

MD Passkey Login Banner

Passwordless login for WordPress with Passkeys. Enable Touch ID, Face ID, and security keys for seamless, phishing-resistant authentication.

Features

  • 🔐 Secure & Seamless Login

    • Passwordless login with Touch ID, Face ID, or security keys.
    • Works instantly for existing users after passkey registration.
  • 📝 Easy User Registration

    • Register a passkey for existing users without one.
    • Create new users directly with passkey registration.
  • ⚙️ Flexible Admin Settings

    • Enable/Disable passkey login with one click.
    • Control session timeout for added security.
    • Multiple authentication options: QR code scan, Chrome guest mode, iCloud Keychain, etc.
    • Limit number of passkeys per user (e.g., max 2 credentials).
  • 🎨 Frontend Integration Shortcodes included

    • [mdlogin_passkey_login] → Displays a Login with Passkey button.
    • [mdlogin_passkey_register] → Displays passkey registration form.
  • 🛡️ Security Requirements

    • Requires HTTPS for secure operation

Changelog

1.1 - 16.10.2025

  • Implemented comprehensive input sanitization and validation across all user inputs.
  • Added rate limiting to prevent brute force attacks and abuse.
  • Enhanced session security with improved management and metadata protection
  • Integrated full CSRF token validation to prevent cross-site request forgery.
  • Applied multiple security headers to mitigate common web vulnerabilities.
  • Minor bug fixes and code refactoring for better maintainability

1.0.0

  • Initial release.

Credits

Multidots Passkey Login – Passwordless Login for WordPress is developed by Multidots. We appreciate the contributions from the open-source community.

Support

For support or questions, please open an issue or contact us via our website at multidots.com.

License

Multidots Passkey Login – Passwordless Login for WordPress is licensed under the GNU General Public License v3. See the license file for more details.

Get In Touch

01-GitHub Footer

About

This Plugin brings the next generation of login security to WordPress. With Passkeys, users can log in using biometric authentication (Touch ID, Face ID) or their device’s security keys—no passwords required.

Resources

License

Stars

Watchers

Forks

Packages

No packages published