Bye Bye Passwords

Bye Bye Passwords brings modern passwordless authentication to WordPress using WebAuthn/Passkeys technology. Say goodbye to weak passwords and hello to secure, convenient login with biometrics, security keys, or platform authenticators.

Key Features

• Passwordless Login – Sign in using Touch ID, Face ID, Windows Hello, or security keys

• Multiple Passkeys – Register multiple devices for convenient access anywhere

• Recovery Codes – Generate one-time backup codes for emergency access

• Enhanced Security – Eliminate password-based attacks completely

• User-Friendly – Simple setup with no technical knowledge required

• Privacy-Focused – Your authentication data stays on your server

• WordPress Integration – Seamlessly integrated into WordPress admin and login

How It Works

• Register a passkey from your WordPress admin profile

• Use your device’s built-in authentication (fingerprint, face, PIN)

• Sign in instantly without typing passwords

Requirements

• SSL/HTTPS enabled website (required for WebAuthn)

• Modern browser with WebAuthn support

• PHP 8.0 or higher

• WordPress 5.0 or higher

External Services

This plugin may connect to the FIDO Alliance Metadata Service (MDS) to download root certificates for authenticator validation.

FIDO Alliance Metadata Service

• URL: https://mds.fidoalliance.org/

• Purpose: Downloads attestation root certificates to verify the authenticity of security keys and passkey devices

• When: Only when attestation verification is enabled and the plugin needs to update its certificate store (not during normal authentication)

• Data sent: No personal or user data is transmitted – only a standard HTTP GET request

• Service provider: FIDO Alliance

• Terms of Use: https://fidoalliance.org/metadata/

• Privacy Policy: https://fidoalliance.org/privacy-policy/

No user data, credentials, or personal information is ever sent to external services. All authentication happens locally on your server.