Docs
Documentation
Everything FluentAuth does, written down. Start at the beginning if you are new, or jump straight to the page you need.
Getting started
5 pages
IntroductionWhat FluentAuth is, which jobs it covers, and what you get in the free plugin.InstallationInstall FluentAuth from the WordPress dashboard, WP-CLI or a zip file, and find its admin menu.Guided setupReview login limits, two-factor authentication, hardening and alerts before applying your setup.First-day setupThe ten-minute configuration that gets a new site protected, and the order to do it in.The dashboardRead your login activity, security status and protection settings in one place.
Login security
5 pages
Limit login attemptsHow the brute-force limit works, the two numbers that control it, and what a blocked visitor sees.Two-factor authenticationConfigure passkeys, authenticator apps and email verification by role, with recovery codes and enforcement.PasskeysSet up domain-bound passkey verification with a device, security key or password manager.IP access rulesBlock addresses or ranges outright, exempt your own from the attempt limit, and restrict roles to known networks.Core security settingsThe one-click hardening switches, what each one closes, the visitor IP settings, and which ones to leave alone.
Passwordless & social login
6 pages
Magic loginLet users sign in with a one-time link sent to their email, as an option or as the primary method.Social loginSign in or register with Google, GitHub or Facebook, where the buttons appear, and how credentials are stored.Login with GoogleCreate a Google OAuth client and connect it to FluentAuth, step by step.Login with GitHubRegister a GitHub OAuth app and connect it to FluentAuth, step by step.Login with FacebookCreate a Meta app with Facebook Login and connect it to FluentAuth, step by step.Google One-TapLet returning visitors sign in with the Google account already open in their browser, in one click.
Forms & redirects
4 pages
Login and signup shortcodesPut a login, signup, password-reset or magic-login form on any page, with the attributes each one accepts.Login and logout redirectsSend each role or capability to the right page after login and logout, with defaults and rule order.Login page designerRestyle wp-login.php and the signup page with your logo, colours and copy, without a theme or CSS.System emailsRewrite the account emails WordPress sends, with your own template, sender and smartcodes.
Monitoring & recovery
5 pages
Audit logsEvery login attempt with its outcome, method, address and device, searchable and auto-purged.Notifications and digestsEmail alerts when a high-level user signs in or an address is blocked, and daily, weekly or monthly summaries.File integrity scanningCompare WordPress core, plugins and themes against the official copies, see what changed, and restore a file.Security findingsOne screen that lists what is wrong, why it matters, and the one action that fixes each item.Recovery after a compromiseUse the Been Hacked screen to revoke sessions, review files and recover account access.
Reference
5 pages
Settings referenceEvery setting in FluentAuth, grouped by screen, with its default and the page that explains it.Hooks and filtersThe actions and filters FluentAuth exposes for developers, grouped by what they control.ConstantsEverything FluentAuth reads from wp-config.php, and the constants it defines.Remote auth (server mode)Use one WordPress site as the login server for others, so a user signs in once.TroubleshootingLocked out, emails not arriving, social login errors, proxies, and where to ask for help.