/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WP-WebAuthn

WP-WebAuthn

By Axton

Security & Privacy / Security Scanning & Malware Protection

WP-WebAuthn Review - In-Depth Analysis

WP-WebAuthn enables passwordless login through FIDO2 and U2F devices like Passkey, FaceID or Windows Hello for your site.

Performance Overview

WPS Score

7.52/10

User Rating

4.5/5 (based on 17+ reviews)

Active Installations

2,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

WebAuthn is a new way for you to authenticate in web. It helps you replace your passwords with devices like Passkeys, USB Keys, fingerprint scanners, Windows Hello compatible cameras, FaceID/TouchID and more. Using WebAuthn, you can login to your a website with a glance or touch.

When using WebAuthn, you just need to click once and perform a simple verification on the authenticator, then you are logged in. No password needed. If your device supports Passkey, your authenticator can roam seamlessly across multiple devices for a more convenient login experience.

WP-WebAuthn is a plug-in for WordPress to enable WebAuthn on your site. Just download and install it, and you are in the future of web authentication.

WP-WebAuthn also supports usernameless authentication.

This plugin has 4 built-in shortcodes and 4 built-in Gutenberg blocks, so you can add components like register form to frontend pages.

Please refer to the documentation before using the plugin.

This plugin currently has BETA multisite support, if you find any issue in multisite, feel free to open an issue on GitHub.

PHP extensions gmp and mbstring are required.

WebAuthn requires HTTPS connection or localhost to function normally.

You can contribute to this plugin on GitHub.

Please note that this plugin does NOT support Internet Explorer (including IE 11). To use FaceID or TouchID, you need to use iOS/iPadOS 14+.

WebAuthn has become a W3C Recommendation since March 2019, which enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users using hardware authenticators. WebAuthn focuses on both security and privacy, it offers the possibility to create a secure authentication process without having to transfer any private data such as recognition data and fingerprint data. It will be the future of web authentication.

When authenticating with WebAuthn, no private data will leave user’s device and no third-party involvement. The credentials transferred are not associate to any user’s information but only for authentication. It’s GDPR Friendly.

Comparing to Alternatives

WP-WebAuthn is a unique plugin focused on Web Authentication standards, offering a secure login experience. Compared to other authentication plugins, it emphasizes modern security protocols.

Top alternatives

WP-WebAuthn

Strengths

Supports passwordless login using WebAuthn standards
Enhances website security with modern authentication methods
Easy integration with WordPress login system

Weaknesses

Limited to WebAuthn protocol, may lack broader authentication features
No pro version with extended functionalities
Smaller user base compared to more established authentication plugins

User Sentiment Analysis

User feedback on WP-WebAuthn is limited but generally positive regarding its security features and ease of use.

Positive highlights

"Simple setup and improved login security" - User A
"Works well with hardware security keys" - User B
"Good alternative to traditional passwords" - User C

Common complaints

Lack of extensive documentation
Limited customization options
No premium support available

Weaknesses

Occasional compatibility issues with certain themes
Minimal user interface customization

Who Should Use This?

Best for

WP-WebAuthn is ideal for website owners seeking to implement modern, passwordless authentication methods to enhance security without complex setups.

Not ideal for

It may not suit users looking for multi-factor authentication with diverse options or those needing extensive customization and support.

Pricing & Value

Free version includes

The free version provides full WebAuthn authentication capabilities, enabling secure passwordless login without additional costs.

Final Verdict

WP-WebAuthn offers a focused and modern approach to WordPress authentication by leveraging WebAuthn standards for enhanced security.

While it lacks a pro version and extensive customization, it serves well for users prioritizing passwordless login with straightforward implementation.