atshift Freeform Login

Description

atshift Freeform Login adds server-verified passkey registration and login to WordPress while keeping the standard WordPress authentication flow and password fallback.

Passkeys let users sign in with a device’s biometric authentication, PIN, or security key instead of typing a username and password. Because each credential is created for this site, passkeys reduce the risks of phishing and password reuse.

Users can register, name, and remove multiple passkeys from the standard WordPress profile screen. Synced passkeys may also be available on other devices using the same storage account. After the first passkey is registered on the site, a passkey login button appears on the WordPress login screen and in the [atshift_login] shortcode.

If WP-Members or another plugin already provides the username and password form, [atshift_passkey_login] can add only the passkey button beside it. Username and password login remains available as a fallback, so users should keep a long, unique password and store it in a password manager.

Passkey support is available on PHP 8.3 or newer when the PHP JSON and OpenSSL extensions are enabled and the site uses HTTPS. Localhost is supported for development. The rest of the plugin continues to run on its stated minimum PHP version when the passkey module is unavailable.

Passkey ceremonies are verified on the WordPress server and do not require an external authentication service. The bundled WebAuthn and supporting libraries are MIT licensed; package names and exact versions are recorded in composer.lock.

When atshift User Profile Fields is active, its optional Passkeys field can place the same management controls within the configured profile layout. Credentials and authentication remain managed by atshift Freeform Login.

Login screen design and shortcodes

The plugin also customizes the standard WordPress login screen without replacing WordPress authentication. The free version includes background colors and images, a site-title brand display, form placement and width, core color controls, responsive fallback, a live preview, the login shortcode, and Jetpack SSO compatibility.

When Jetpack SSO is active, its WordPress.com login UI is styled without replacing Jetpack authentication. The shortcode uses Jetpack automatically and respects Jetpack settings that hide or bypass the local login form. Use [atshift_login jetpack="hide"] only when local username and password login remains available.

Links

• Official website: upf.at-shift.net/en/freeform-login

Shortcodes

Use [atshift_login] for the complete username, password, and passkey login experience.

If WP-Members or another plugin already provides the username and password form, place [atshift_passkey_login] beside it to output only the passkey button. It accepts redirect, remember, and class. remember defaults to false; use remember="true" to request WordPress’s persistent login cookie.

The standalone button is omitted when the visitor is already logged in, passkeys are unavailable, no passkey has been registered on the site, or Jetpack SSO disables local login.

Pro Add-on

The optional Pro add-on extends the free plugin with custom logo images, precise position offsets, transparency, borders, corner radius, and detailed shadow controls. The free plugin remains usable without an add-on.

• Pro add-on: Upgrade to Pro

Related Projects

• atshift User Profile Fields – create practical WordPress user profile fields and optionally place Freeform Login passkey controls within its profile layouts.
• at-shift Fields – arrange custom fields for posts and custom post types with a similar field-building experience.
• atshift Feed Builder – create purpose-specific RSS 2.0 and JSON Feed 1.1 feeds from structured WordPress content.