Bye Bye Passwords brings modern passwordless authentication to WordPress using WebAuthn/Passkeys technology. Say goodbye to weak passwords and hello to secure, convenient login with biometrics, security keys, or platform authenticators.

Key Features

Passwordless Login – Sign in using Touch ID, Face ID, Windows Hello, or security keys
Multiple Passkeys – Register multiple devices for convenient access anywhere
Recovery Codes – Generate one-time backup codes for emergency access
Enhanced Security – Eliminate password-based attacks completely
User-Friendly – Simple setup with no technical knowledge required
Privacy-Focused – Your authentication data stays on your server
WordPress Integration – Seamlessly integrated into WordPress admin and login

How It Works

Register a passkey from your WordPress admin profile
Use your device’s built-in authentication (fingerprint, face, PIN)
Sign in instantly without typing passwords

Requirements

SSL/HTTPS enabled website (required for WebAuthn)
Modern browser with WebAuthn support
PHP 7.2 or higher
WordPress 5.0 or higher

External Services

This plugin may connect to the FIDO Alliance Metadata Service (MDS) to download root certificates for authenticator validation.

FIDO Alliance Metadata Service

URL: https://mds.fidoalliance.org/
Purpose: Downloads attestation root certificates to verify the authenticity of security keys and passkey devices
When: Only when attestation verification is enabled and the plugin needs to update its certificate store (not during normal authentication)
Data sent: No personal or user data is transmitted – only a standard HTTP GET request
Service provider: FIDO Alliance
Terms of Use: https://fidoalliance.org/metadata/
Privacy Policy: https://fidoalliance.org/privacy-policy/

No user data, credentials, or personal information is ever sent to external services. All authentication happens locally on your server.