Secure Passkeys

75 Quality Score

Active Installs

14/30

With only 1,000 active installs, it is a niche plugin rather than a mainstream choice, though WebAuthn is still an emerging space in WordPress.

Update Freshness

25/25

Updated on 2026-07-01 and tested against WordPress 7.0, this is one of the most actively maintained plugins in the category.

User Rating

14/15

A 96 out of 100 score from 18 reviewers is excellent, though the small sample size means a few early adopters carry a lot of weight.

Support Health

8/15

4 of 5 support threads (80%) are resolved, which is decent but the low thread volume gives limited signal on long-term support capacity.

WP Compatibility

15/15

Requires WordPress 6.0 and PHP 7.4, covering most current installations while still supporting a wide PHP range.

Scores higher than 41% of indexed plugins

About

Secure Passkeys is a powerful WordPress plugin that enables passwordless authentication using WebAuthn technology.

Active Installs 1k+

Rating ★★★★½ 4.8/5

Last Updated 2026-07-01 8:15pm GMT

Requires WordPress 6.0+

Tested Up To 7.0.4

Requires PHP 7.4+

Security History

1 known vulnerability, all patched

1 Medium

Most recent: September 19, 2025

View details ▸

What It Does

Secure Passkeys adds passwordless login to WordPress using the WebAuthn standard, allowing users to authenticate with device biometrics, security keys, or platform authenticators instead of typing passwords. It integrates directly into the default wp-login flow, so admins can enable or require passkeys per user role or site-wide without modifying core files.

Who It's For

This plugin suits site owners running membership portals, client dashboards, or e-commerce stores where password reuse and credential stuffing are real risks, and where users are likely on modern devices that support biometric or hardware key authentication. It is also a good fit for security-conscious admins who want to phase out passwords on internal or single-user sites without adopting a full identity provider.

Who Should Skip It

If your users are mostly on older browsers, shared kiosks, or environments without biometric or FIDO2 support, skip this plugin since they will be locked out or forced back to passwords. Small personal blogs with no sensitive data also do not need the added login complexity.

The Bottom Line

Secure Passkeys delivers a focused, well-maintained passwordless solution with strong ratings and forward-looking compatibility, earning an overall score of 75.33 out of 100. Its Achilles heel is adoption: 1,000 installs means limited real-world track record and a thinner support history than the alternatives above. For admins ready to bet on WebAuthn today, it is a solid pick, but cautious site owners may prefer waiting for broader usage.

Related Plugins

WPS Hide Login 89/100

Pick this if your concern is hiding or renaming wp-login.php from attackers rather than changing how users actually log in.

Loginizer 89/100

Choose this for brute-force protection and login attempt limits if you want to keep passwords rather than eliminate them.

Security Plugin, Firewall & Malware Scanner with Auto Removal 88/100

Opt for this if you need a full security suite with firewall and malware scanning, not just authentication changes.

Security Optimizer – The All-In-One Protection Plugin 88/100

Pick this for broad hardening features across login, firewall, and content protection in one bundled plugin.

LoginPress | wp-login Custom Login Page Customizer 86/100

Choose this for branding and customizing the existing login page rather than swapping the authentication method.