Authorizer vs Secure Passkeys

Authorizer restricts access to a WordPress site to specific users, typically students enrolled in a university course. It maintains a list of approved users that you can edit to determine who has access. It also replaces the default WordPress login/authorization system with one relying on an external server, such as Google, CAS, LDAP, or an OAuth2 provider. Finally, Authorizer lets you limit invalid login attempts to prevent bots from compromising your users’ accounts. View or contribute to the plugin source on GitHub: https://github.com/uhm-coe/authorizer Authorizer requires the following: CAS server (2.x, 3.x, 4.x, 5.x, 6.x, or 7.x) or LDAP server (plugin needs the URL) PHP extensions: php-ldap, php-curl, php-dom Authorizer provides the following options: Authentication: WordPress accounts; Google accounts; CAS accounts; LDAP accounts; OAuth2 accounts Login Access: All authenticated users (all local and all external can log in); Only specific users (all local and approved external users can log in) View Access: Everyone (open access); Only logged in users Limit Login Attempts: Progressively increase the amount of time required between invalid login attempts. Shortcode: Use the [authorizer_login_form] shortcode to embed a wp_login_form() outside of wp-login.php.

Secure Passkeys is a powerful WordPress plugin that enables seamless passwordless authentication using WebAuthn technology. By eliminating the need for traditional passwords, it enhances security and improves the user login experience. With support for biometric authentication, security keys, and device-bound credentials, Secure Passkey provides a robust and user-friendly solution for modern authentication. Unlike traditional password-based authentication, Secure Passkey leverages cryptographic key pairs to ensure secure logins. The private key remains securely stored on the user’s device, while the public key is registered with the WordPress site. This method protects against phishing attacks and password breaches, ensuring that only authorized users can gain access. Secure Passkeys integrates effortlessly into WordPress, allowing users to register and manage their passkeys from their profile settings. Once registered, users can log in using their fingerprint, face recognition, or a hardware security key without the need to remember or enter a password. Features Passwordless Login: Secure authentication via WebAuthn with biometric devices, security keys, Touch ID, Face ID, and more. Enhanced User Experience: Password-free login for a smoother user journey. Integration Support: WordPress default login form WooCommerce login page MemberPress login form Easy Digital Downloads login form Ultimate Member login form Admin Management: Administrators can delete, activate, or deactivate users directly from plugin settings or user profiles. Passkeys Reminder Notice: New option to enable or disable the passkeys reminder notice in the WordPress admin area for users who have not yet enabled passkeys. Activity Logging: Monitor activity logs and track last login/registration of passkeys. Multiple Passkeys: Supports multiple passkey registrations per user, with the option to set a registration limit or allow unlimited registrations. Role Restrictions: Restrict and exclude specific user roles from using passkey authentication. Passkey Autofill: Passkeys automatically appear as a suggestion when clicking the username field — no button click required. Rate Limiting: Configurable rate limiting on login attempts to protect against automated attacks. Long-lived Session: Control whether passkey logins set a persistent session cookie or end when the browser is closed. Customizable Settings: Adjust timeout settings for passkey registration and login. User Verification: Enforce user verification for enhanced security. Frontend Customization: Easily customize frontend themes or add your own with basic frontend skills. Theme Support: Supports pre-built themes like YOOtheme (UIkit) for frontend shortcodes. Shortcodes: Embed passkey login and registration forms on custom frontend pages. Passkey Display: Show passkey details in admin user lists and profiles. Multisite: Supports WordPress Multisite and single-site installations. Database Optimization: Option to allow or disallow automatic deletion of old challenge records and activity logs (configurable schedule). Requirements WordPress 6.0 or newer. PHP version 7.4 or newer. License Secure Passkeys is licensed under the GNU General Public License v2 or later.