WP-WebAuthn for WordPress

The good stuff

The biggest win? Logging in feels like magic. I tested it with my iPhone using a passkey, and it just worked - one tap, no password, no fumbling. It even supports usernameless login, which means I don’t have to remember or type a username at all. That’s huge for user experience, especially on mobile. The built-in shortcodes and Gutenberg blocks make it easy to add registration forms without touching code. I dropped one onto a front-end page in under a minute, and it looked clean. And yeah, it actually respects privacy - nothing gets sent over the wire during auth, which makes GDPR compliance less of a headache. If you're serious about security, this isn't just convenient, it's smart.

The not-so-good

It does require HTTPS, so if you’re running a dev site locally, you’ll need to set up a local SSL. Not a dealbreaker, but something to keep in mind. Also, it doesn’t work with Internet Explorer - which is fine by me, but if you still have users stuck on IE, this won’t help. The plugin itself is pretty barebones. No dashboard, no logs, no admin UI beyond basic settings. You’ll need to know what you’re doing if you want to tweak things. And honestly, the lack of downloads or clear developer info makes me a little cautious. But if you’re okay with a no-frills tool that just works, it’s not a problem.

Bottom line

If you’re running a WordPress site and want to move past passwords, WP-WebAuthn for WordPress is a solid choice. It’s lightweight, secure, and actually makes logins faster. Free, well-built, and focused on privacy. Perfect for anyone who’s done with password fatigue and wants a real alternative. Give it a try - it might be the last login plugin you ever need.