/ Plugin Category

/ User Management & Authentication

/ User Registration & Login

/ Simple JWT Login – Allows you to use JWT on REST endpoints.

Simple JWT Login – Allows you to use JWT on REST endpoints.

By Nicu Micle

User Management & Authentication / User Registration & Login

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Simple JWT Login – Allows you to use JWT on REST endpoints. Review - In-Depth Analysis

Enhance the WordPress REST API with JWT authentication for secure access by mobile apps, external sites, and third-party services.

Performance Overview

WPS Score

6.75/10

User Rating

5/5 (based on 47+ reviews)

Active Installations

4,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5.97 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Simple JWT Login is a free WordPress plugin that enables secure authentication for your WordPress REST API using JSON Web Tokens (JWT).

With this powerful plugin, you can log in, register, and authenticate users effortlessly. Connect mobile apps, external websites, or third-party services to WordPress with ease. Change or delete user passwords securely.

Whether you are building a headless WordPress setup or integrating with external platforms, Simple JWT Login provides a fast, secure, and reliable authentication solution.

Some awesome features include auto-login using JWT, user registration via API, and the ability to delete WordPress users based on a JWT. You can also reset user passwords and allow auto-login or registration only from specific IP addresses.

This plugin supports multiple JWT decryption algorithms and allows you to protect endpoints with JWT. It also integrates with Google OAuth and WPGraphQL.

Comparing to Alternatives

Simple JWT Login is a specialized plugin for JWT authentication on REST endpoints, with one notable alternative available.

Top alternatives

JWT Auth – WordPress JSON Web Token Authentication ( WPS: 6.91)

Strengths

Highly responsive and knowledgeable developer support
Easy to set up and well documented
No intrusive ads or unnecessary features
High customization capabilities
Works reliably out of the box

Weaknesses

Has had several high-severity security vulnerabilities in the past
Requires keeping up with updates to maintain security
Limited to JWT authentication use cases
No pro version with extended features

User Sentiment Analysis

With a perfect 5-star rating from 47 reviews, users overwhelmingly praise the plugin's functionality and support.

Positive highlights

'JWT login plugin is awesome, their support is quite responsive and efficient.' – wintear
'This is what I needed, works as expected.' – graphems
'Best of all JWT plugins, developer responsiveness is incredible.' – webmaster67
'Exceptionally well documented, high customization, easy to setup.' – Thomas
'By far the best JWT plugin for headless.' – cbd4coins

Common complaints

Weaknesses

Past security vulnerabilities may concern cautious users
No paid version means fewer advanced features
Limited scope focused solely on JWT authentication

Who Should Use This?

Best for

Developers and site owners needing a straightforward, reliable JWT authentication solution with excellent support and customization options.

Not ideal for

Users seeking a plugin with extended premium features or those unwilling to manage security updates carefully due to past vulnerabilities.

Pricing & Value

Free version includes

The free version includes full JWT authentication functionality with customization support and responsive developer assistance.

Final Verdict

Simple JWT Login stands out as a top choice for JWT authentication on WordPress REST endpoints, praised for its ease of use, thorough documentation, and exceptional developer support. Its free offering is robust and meets the needs of most users seeking JWT integration.

However, users should be mindful of the plugin's history of security vulnerabilities and ensure timely updates are applied. While it lacks a pro version, its focused functionality and strong community feedback make it a reliable option compared to alternatives.

Other Notable Features

Here are a few other notable features of this free Simple JWT Login – Allows you to use JWT on REST endpoints. plugin.

API

Auto login

JWT

Tokens

Screenshots

FAQ

Yes, this plugin is secure. It allows to auto-login to your WordPress website using a JWT, that is decrypted and validated against your JWT Decryption key.
Make sure you set the specific user type when new users are created.

Here is a code example, how to send an email after a new user has been created.

add_action( 'simple_jwt_login_register_hook', function($user, $password){     $to      = $user->user_email;     $subject = 'Welcome';     $message = '                Welcome to My Site. Your new user credentials are:                 email: ' . $to .'                password: '. $password;     wp_mail($to, $subject, $message);    }, 10, 2);

Here is an example on how you can overwrite the “No Redirect” response after autologin:

add_filter('simple_jwt_login_no_redirect_message',function($response, $request){     $response['userId'] = get_current_user_id();     $response['userDetails'] = wp_get_current_user();     return $response; },10, 2);

Here is an example, on how you can change the body for reset password email template:

add_filter('simple_jwt_login_reset_password_custom_email_template', function ($template, $request) {         $template .= 'The template has been modified by hook';         return $template;     },     10,     2 );