內容簡介
CS BioLogin 外掛提供無密碼登入功能，利用 WebAuthn 標準（FIDO2 / passkeys）讓使用者透過生物識別技術（如 Face ID、Touch ID）安全登入 WordPress，並確保生物識別資料不會離開使用者設備。
【主要功能】
• 提供生物識別登入選項
• 允許使用者管理個人 passkeys
• 提供管理員設定與安全日誌介面
• 實施認證嘗試的速率限制與鎖定
• 支援 WooCommerce 帳號管理整合
外掛標籤
開發者團隊
② 後台搜尋「CS BioLogin – Seamless Biometric Authentication」→ 直接安裝（推薦）
原文外掛簡介
CS BioLogin adds passwordless sign-in to WordPress using the WebAuthn standard (FIDO2 / passkeys). Visitors can authenticate with Face ID, Touch ID, Windows Hello, or a platform fingerprint reader. Biometric templates never leave the user’s device; only public key credentials are stored in your WordPress database.
👉 See this plugin in context with our other products: Concatstring Labs Product Page
What this plugin does
Adds a Sign in with Biometrics option on the WordPress login screen, with password login still available unless Force Biometric Login is enabled.
Lets logged-in users register, rename, update, and remove passkeys from their profile, a front-end shortcode page, or WooCommerce My Account.
Provides an admin screen for settings, security logs, and per-user device management.
Applies rate limiting and lockout on authentication attempts.
What this plugin does NOT do
It does not send user data, credentials, or biometrics to third-party servers. All verification runs on your site over HTTPS.
It does not store fingerprint or face images, only WebAuthn public keys and device metadata you configure.
How it works
Administrator enables the plugin under Biometric Login and, if needed, restricts specific roles from using biometrics.
User opens their profile (WordPress admin profile, [csbisebi_device_manager] page, or WooCommerce My Account → CS BioLogin) and clicks Add Biometric Device. The browser shows the OS passkey/biometric prompt.
Login, on wp-login.php (or WooCommerce login), the user chooses biometric sign-in. The plugin issues a WebAuthn challenge via the REST API, verifies the signed response, and creates a normal WordPress session.
REST routes live under csbisebi-biometric-login/v1 on your own site (for example /wp-json/csbisebi-biometric-login/v1/auth/options). No external API keys are required.
WooCommerce
When WooCommerce is active, CS BioLogin adds a My Account tab, checkout/account login prompts, and automatic use of the account area instead of a standalone management page.
Requirements
WordPress 6.2 or later
PHP 7.4+ with OpenSSL
HTTPS on production (WebAuthn requires a secure context; localhost and *.local are allowed for development)
Privacy and data storage
Biometric samples stay on the user’s device.
The plugin stores passkey public keys, optional device labels, timestamps, and security log entries in your WordPress database.
Uninstalling the plugin (when data removal is enabled via uninstall) drops the custom credentials table and plugin options.
