Passkeys
Sign in to WordPress without entering a username or password. Use Touch ID, Windows Hello, a security key or a compatible password manager.
New in FluentAuth 3.0.Explore FluentAuthProtect the site.
Protect the site.
Welcome the people.
Stronger login checks, a clearer view of activity and a sign-in experience that feels like your site. Explore the tools and choose what fits.
Every feature below is in the 3.0.0 download. See what is new in 3.0 →
Protect logins
Make every sign-in more secure.
Choose how accounts verify their identity and put sensible limits around access.
Two-factor authentication
Choose verification methods by role, so the people with the most access have an extra check before entering WordPress.
Available in the current release. Authenticator apps, passkeys and recovery codes were added in 3.0.Limit login attempts
Set a failed-login threshold and a block window to slow repeated attempts from the same address.
Available in the current release.IP access rules
Block known addresses or ranges, manage attempt-limit exceptions and restrict selected roles by network.
Available in the current release. The expanded IP access rules screen arrived in 3.0.WordPress hardening
Review XML-RPC, application passwords, public username exposure and dashboard access in one settings area.
Available in the current release.Review & respond
Understand activity. Know what to do next.
Follow the evidence from a login event to a configuration issue or an unexpected file change.
Activity & audit logs
Review successful, failed and blocked logins with the details you need to understand unusual activity.
Available in the current release. Plugin activity and recovery actions were added in 3.0.Security checklist
Review configuration issues, exposed files and account risks with explanations that help you choose the next step.
New in FluentAuth 3.0.File change monitoring
Compare WordPress files with known copies and investigate differences before deciding what to restore.
Available in the current release. Plugin and theme checks, diffs and snapshots were added in 3.0.Recovery tools
Bring session revocation, password-reset requests and file recovery actions into one place for administrators.
New in FluentAuth 3.0.Notifications & reports
Receive selected login and block alerts, plus scheduled summaries of authentication activity.
Available in the current release.Improve sign-in
Give people a better way in.
Familiar sign-in options, a page that feels like your brand and the right destination for each role.
Social login & Google One Tap
Offer Google, GitHub and Facebook sign-in, with Google One Tap for an additional way to enter your site.
Available in the current release.Magic login links
Let users request a one-time email link when they want to enter your site without remembering a password.
Available in the current release.Login page designer
Use your own logo, colours, background and welcome copy on the WordPress login and signup experience.
Available in the current release. Screenshots show the redesigned 3.0 admin.Login & logout redirects
Choose login and logout destinations by role, with a default for everyone else.
Available in the current release.Custom login & signup forms
Embed login, registration, password-reset and magic-login forms in your own WordPress pages.
Available in the current release.Custom system emails
Adjust supported WordPress account email templates with clear wording and branding for your users.
Available in the current release.For the way your site works
Start with the people who depend on it.
Choose protections around the work your team and members do every day.
Keep the people who run your site protected.
Your staff can publish content, manage accounts and change the site. Start with verification for privileged roles, then keep an activity trail for the moments you need to understand.
Help members get back to what they came for.
A forgotten password should not turn every visit into a support request. Offer familiar sign-in options, make the page feel like your site and send each role to a useful destination.
Make the next review easier to explain.
Bring login activity and file changes into the maintenance conversation. The security checklist adds explanations and next steps, helping you show clients what needs attention and what you have reviewed.
Adding protection to a site that is already busy?
Read the team login guide →Roll it out one role and one sign-in journey at a time.
Build a login experience you can trust.
Start with the protections your site needs. Add the sign-in options your users will appreciate.