Solana Login and Content Locker is a Web3 authentication plugin for WordPress that allows you to token-gate your content or create exclusive areas using the Phantom wallet on the Solana blockchain.

Say goodbye to traditional email/password logins and embrace the decentralized web.

Key Features

Phantom Wallet Support: Seamlessly connect and authenticate users via Phantom.

Cryptographic Security: Utilizes robust Ed25519 signature verification via libsodium to ensure maximum security against spoofing.

Content Protection: Easily lock your posts and pages. Only authenticated Web3 users can access the content.

Automatic Account Creation: Automatically handles WordPress sessions and creates standard subscriber accounts for authenticated wallets.

Lightweight & Fast: Strictly object-oriented architecture that won’t slow down your site. Fully bundled libraries ensure compliance with WordPress directory guidelines.

Included Libraries & Third-Party Code

To ensure maximum performance and compliance with WordPress guidelines regarding external assets, this plugin includes the following library bundled locally:

Solana Web3.js (solana-web3.min.js)

Description: The official Solana JavaScript API, required to interact with the Solana blockchain and Phantom wallet.

Source: The minified version bundled in this plugin (assets/js/solana-web3.min.js) is the exact distribution file from @solana/web3.js.

Unminified Source Code: The full, unminified source code for this library can be reviewed at the official Solana Labs repository: https://github.com/solana-labs/solana-web3.js

License: MIT License.

External Services

This plugin relies on external services to function properly. By using this plugin, your website’s frontend will interact with the following third-party services:

Solana Public RPC Nodes

Purpose: The bundled solana-web3.js library connects directly from the user’s browser to Solana’s public RPC nodes (Mainnet-beta, Devnet, or Testnet) to verify blockchain states and facilitate cryptographic requests.

Data Transmitted: No Personal Identifiable Information (PII) from your WordPress database is sent. The user’s browser only transmits cryptographic requests (such as public keys) to the Solana network.

Terms & Privacy: Solana Terms of Service(https://solana.com/tos) | Solana Privacy Policy(https://solana.com/privacy-policy)

Phantom Wallet

Purpose: The plugin interacts with the user’s installed Phantom browser extension to request connection authorization and cryptographic signatures.

Data Transmitted: The plugin requests the user’s Solana Public Key and asks the wallet to sign a secure, randomly generated challenge string. No private keys, balances, or financial data are ever accessed or transmitted.

Terms & Privacy: Phantom Terms of Service(https://phantom.app/terms) | Phantom Privacy Policy(https://phantom.app/privacy)