[WordPress] 外掛分享： Keyless Login

外掛標籤

開發者團隊

原文外掛簡介

Keyless Login brings modern, phishing-resistant authentication to your WordPress site.
Log in with your fingerprint, face, or a hardware security key — no password ever required or transmitted. Implemented entirely in pure PHP using only the built-in openssl extension. No Composer, no vendor folder, no third-party libraries.
How It Works
KeylessWP implements the W3C WebAuthn Level 2 specification from scratch:

A custom CBOR decoder parses authenticator data
Custom ASN.1/DER builders construct public keys
PHP’s built-in openssl_verify() verifies ECDSA P-256 (ES256) and RSA-2048 (RS256) signatures
Credentials are stored in a dedicated database table with sign-count clone detection

Supported Authentication Methods

🖐 Fingerprint sensors (Touch ID, Windows Hello)
😊 Face recognition (Face ID, Windows Hello face camera)
🔑 Hardware security keys (YubiKey, Google Titan Key, Feitian)
🔐 Platform passkey managers (iCloud Keychain, Google Password Manager)

Features

Full FIDO2 / WebAuthn Level 2 implementation — pure PHP
ECDSA P-256 (ES256) and RSA-2048 (RS256) signature verification
Zero external libraries — only PHP’s built-in openssl extension required
Passkey registration and management from the user profile page
Per-credential device naming, creation date, and last-used tracking
Sign-count verification on every authentication (clone detection)
Phishing-resistant: credentials are cryptographically bound to your domain
Admin settings page with live usage statistics
Graceful fallback: the standard password form remains available
Translatable — all strings use __() with the keylesswp text domain

Privacy
KeylessWP does not collect, transmit, or share any user data. No external services are contacted. Biometric data never leaves the user’s device — only a cryptographic public key is stored on the server.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)le Plugins include Complianz GDPR, Disable Updates Manage...Jetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款多合一 WordPress 外掛，整合網站安全防護、自...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 可以讓你安心地在 WordPress 中上傳 SVG 檔案！ 它...LoginizerLoginizer 是一款 WordPress 安全防護外掛，主要用於阻擋暴力...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Reloaded 是一款強大的安全外掛，旨在...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role Editor「User Role Editor」WordPress 外掛讓您輕鬆更改使用者角色...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionSolid Security 是一款專為 WordPress 網站設計的安全外掛，...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP Plugin版本: 1.6.7 您可以在日文網頁和英文網頁上找到文件、常見問...