Bye Bye Passwords

Bye Bye Passwords brings modern passwordless authentication to WordPress using WebAuthn/Passkeys technology. Say goodbye to weak passwords and hello to secure, convenient login with biometrics, security keys, or platform authenticators.

Key Features

• Passwordless Login – Sign in using Touch ID, Face ID, Windows Hello, or security keys
• Multiple Passkeys – Register multiple devices for convenient access anywhere
• Recovery Codes – Generate one-time backup codes for emergency access
• Enhanced Security – Eliminate password-based attacks completely
• User-Friendly – Simple setup with no technical knowledge required
• Privacy-Focused – Your authentication data stays on your server
• WordPress Integration – Seamlessly integrated into WordPress admin and login

How It Works

1. Register a passkey from your WordPress admin profile
2. Use your device’s built-in authentication (fingerprint, face, PIN)
3. Sign in instantly without typing passwords

Requirements

• SSL/HTTPS enabled website (required for WebAuthn)
• Modern browser with WebAuthn support
• PHP 8.0 or higher
• WordPress 5.0 or higher

External Services

This plugin may connect to the FIDO Alliance Metadata Service (MDS) to download root certificates for authenticator validation.

FIDO Alliance Metadata Service

• URL: https://mds.fidoalliance.org/
• Purpose: Downloads attestation root certificates to verify the authenticity of security keys and passkey devices
• When: Only when attestation verification is enabled and the plugin needs to update its certificate store (not during normal authentication)
• Data sent: No personal or user data is transmitted – only a standard HTTP GET request
• Service provider: FIDO Alliance
• Terms of Use: https://fidoalliance.org/metadata/
• Privacy Policy: https://fidoalliance.org/privacy-policy/

No user data, credentials, or personal information is ever sent to external services. All authentication happens locally on your server.