Title: Keyless Login Author: susheelhbti Published: 2026년 5월 20일 Last modified: 2026년 5월 20일 --- 플러그인 검색 ![](https://s.w.org/plugins/geopattern-icon/keyless-login.svg) # Keyless Login 작성자: [susheelhbti](https://profiles.wordpress.org/susheelhbti/) [다운로드](https://downloads.wordpress.org/plugin/keyless-login.zip) * [세부사항](https://ko.wordpress.org/plugins/keyless-login/#description) * [평가](https://ko.wordpress.org/plugins/keyless-login/#reviews) * [설치](https://ko.wordpress.org/plugins/keyless-login/#installation) * [개발](https://ko.wordpress.org/plugins/keyless-login/#developers) [지원](https://wordpress.org/support/plugin/keyless-login/) ## 설명 **Keyless Login** brings modern, phishing-resistant authentication to your WordPress site. Log in with your fingerprint, face, or a hardware security key — no password ever required or transmitted. Implemented entirely in pure PHP using only the built-in` openssl` extension. No Composer, no vendor folder, no third-party libraries. #### How It Works KeylessWP implements the [W3C WebAuthn Level 2](https://www.w3.org/TR/webauthn-2/) specification from scratch: * A custom CBOR decoder parses authenticator data * Custom ASN.1/DER builders construct public keys * PHP’s built-in `openssl_verify()` verifies ECDSA P-256 (ES256) and RSA-2048 ( RS256) signatures * Credentials are stored in a dedicated database table with sign-count clone detection #### Supported Authentication Methods * 🖐 Fingerprint sensors (Touch ID, Windows Hello) * 😊 Face recognition (Face ID, Windows Hello face camera) * 🔑 Hardware security keys (YubiKey, Google Titan Key, Feitian) * 🔐 Platform passkey managers (iCloud Keychain, Google Password Manager) #### Features * Full FIDO2 / WebAuthn Level 2 implementation — pure PHP * ECDSA P-256 (ES256) and RSA-2048 (RS256) signature verification * Zero external libraries — only PHP’s built-in `openssl` extension required * Passkey registration and management from the user profile page * Per-credential device naming, creation date, and last-used tracking * Sign-count verification on every authentication (clone detection) * Phishing-resistant: credentials are cryptographically bound to your domain * Admin settings page with live usage statistics * Graceful fallback: the standard password form remains available * Translatable — all strings use `__()` with the `keylesswp` text domain #### Privacy KeylessWP does not collect, transmit, or share any user data. No external services are contacted. Biometric data never leaves the user’s device — only a cryptographic public key is stored on the server. ## 설치 1. Upload the `keylesswp` folder to `/wp-content/plugins/` 2. Activate the plugin via **Plugins Installed Plugins** 3. Go to **Users Your Profile** and click **Register New Passkey** 4. Follow your device’s biometric or security-key prompt 5. Log out and click **Sign in with Passkey** on the login page #### Requirements * PHP 8.0 or higher * PHP `openssl` extension (enabled by default on virtually all hosts) * HTTPS — required by the WebAuthn browser API * WordPress 6.4 or higher ## FAQ ### Does this plugin require any external library or Composer? No. Everything — CBOR decoding, ASN.1/DER key building, ECDSA and RSA verification— is implemented in pure PHP using only the `openssl` extension that ships with PHP. ### Does this work without HTTPS? No. The WebAuthn browser API will refuse to run on non-secure origins. All modern WordPress hosting provides HTTPS. ### Can users still log in with their password? Yes. By default, the standard password form remains visible alongside the passkey button. You can change this under **Settings Keyless Login**. ### What data is stored on the server? Only the credential ID, public key (PEM format), sign count, device name, and timestamps. Biometric data is processed entirely on the user’s device and never transmitted. ### Is this compatible with multisite? Single-site support is the focus of v1.0. Multisite compatibility is planned for v1.1. ### Privacy Policy This plugin does not send any data to external servers. No tracking, no analytics, no third-party services are used. On uninstall, all plugin data is deleted from the database. ## 후기 이 플러그인에 대한 평가가 없습니다. ## 기여자 & 개발자 “Keyless Login”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다. 기여자 * [ susheelhbti ](https://profiles.wordpress.org/susheelhbti/) [자국어로 “Keyless Login”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/keyless-login) ### 개발에 관심이 있으십니까? [코드 탐색하기](https://plugins.trac.wordpress.org/browser/keyless-login/)는, [SVN 저장소](https://plugins.svn.wordpress.org/keyless-login/) 를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/keyless-login/) 을 [RSS](https://plugins.trac.wordpress.org/log/keyless-login/?limit=100&mode=stop_on_copy&format=rss) 로 구독하세요. ## 변경이력 #### 1.0.0 * Initial release * Pure PHP CBOR decoder (RFC 7049) * Pure PHP WebAuthn attestation and assertion verifier * ES256 (ECDSA P-256) and RS256 (RSA-2048) support * Custom DB table with sign-count clone detection * Complete registration and authentication flows * Admin settings page with usage statistics * Full i18n support with `keylesswp` text domain ## 기초 * 버전 **1.0.0** * 최근 업데이트: **4개월 전** * 활성화된 설치 **10보다 적음** * 워드프레스 버전 ** 6.4 또는 그 이상 ** * 다음까지 시험됨: **6.9.9** * PHP 버전 ** 8.0 또는 그 이상 ** * 언어 * [English (US)](https://wordpress.org/plugins/keyless-login/) * 태그: * [fido2](https://ko.wordpress.org/plugins/tags/fido2/)[passkey](https://ko.wordpress.org/plugins/tags/passkey/) [passwordless](https://ko.wordpress.org/plugins/tags/passwordless/)[security](https://ko.wordpress.org/plugins/tags/security/) [webauthn](https://ko.wordpress.org/plugins/tags/webauthn/) * [고급 보기](https://ko.wordpress.org/plugins/keyless-login/advanced/) ## 평점 아직 제출된 리뷰가 없습니다. [Your review](https://wordpress.org/support/plugin/keyless-login/reviews/#new-post) [모든 리뷰 보기](https://wordpress.org/support/plugin/keyless-login/reviews/) ## 기여자 * [ susheelhbti ](https://profiles.wordpress.org/susheelhbti/) ## 지원 할 말 있으신가요? 도움이 필요하신가요? [지원 포럼 보기](https://wordpress.org/support/plugin/keyless-login/)