atshift Freeform Login adds server-verified passkey registration and login to WordPress while keeping the standard WordPress authentication flow and password fallback.<\/p>\n\n
Passkeys let users sign in with a device's biometric authentication, PIN, or security key instead of typing a username and password. Because each credential is created for this site, passkeys reduce the risks of phishing and password reuse.<\/p>\n\n
Users can register, name, and remove multiple passkeys from the standard WordPress profile screen. Synced passkeys may also be available on other devices using the same storage account. After the first passkey is registered on the site, a passkey login button appears on the WordPress login screen and in the If WP-Members or another plugin already provides the username and password form, Passkey support is available on PHP 8.3 or newer when the PHP JSON and OpenSSL extensions are enabled and the site uses HTTPS. Localhost is supported for development. The rest of the plugin continues to run on its stated minimum PHP version when the passkey module is unavailable.<\/p>\n\n Passkey ceremonies are verified on the WordPress server and do not require an external authentication service. The bundled WebAuthn and supporting libraries are MIT licensed; package names and exact versions are recorded in When atshift User Profile Fields is active, its optional Passkeys field can place the same management controls within the configured profile layout. Credentials and authentication remain managed by atshift Freeform Login.<\/p>\n\n The plugin also customizes the standard WordPress login screen without replacing WordPress authentication. The free version includes background colors and images, a site-title brand display, form placement and width, core color controls, responsive fallback, a live preview, the login shortcode, and Jetpack SSO compatibility.<\/p>\n\n When Jetpack SSO is active, its WordPress.com login UI is styled without replacing Jetpack authentication. The shortcode uses Jetpack automatically and respects Jetpack settings that hide or bypass the local login form. Use Use If WP-Members or another plugin already provides the username and password form, place The standalone button is omitted when the visitor is already logged in, passkeys are unavailable, no passkey has been registered on the site, or Jetpack SSO disables local login.<\/p>\n\n The optional Pro add-on extends the free plugin with custom logo images, precise position offsets, transparency, borders, corner radius, and detailed shadow controls. The free plugin remains usable without an add-on.<\/p>\n\n Shortcode examples:<\/p>\n\n[atshift_login]<\/code> shortcode.<\/p>\n\n[atshift_passkey_login]<\/code> can add only the passkey button beside it. Username and password login remains available as a fallback, so users should keep a long, unique password and store it in a password manager.<\/p>\n\ncomposer.lock<\/code>.<\/p>\n\nLogin screen design and shortcodes<\/h4>\n\n
[atshift_login jetpack=\"hide\"]<\/code> only when local username and password login remains available.<\/p>\n\nLinks<\/h3>\n\n
\n
Shortcodes<\/h3>\n\n
[atshift_login]<\/code> for the complete username, password, and passkey login experience.<\/p>\n\n[atshift_passkey_login]<\/code> beside it to output only the passkey button. It accepts redirect<\/code>, remember<\/code>, and class<\/code>. remember<\/code> defaults to false<\/code>; use remember=\"true\"<\/code> to request WordPress's persistent login cookie.<\/p>\n\nPro Add-on<\/h3>\n\n
\n
Related Projects<\/h3>\n\n
\n
\n
\/wp-content\/plugins\/<\/code>.<\/li>\n[atshift_login]<\/code>.<\/li>\n[atshift_passkey_login]<\/code> where only the passkey button should appear.<\/li>\n<\/ol>\n\n