=== Secure Passkeys ===
Contributors: endisha
Tags: passwordless, webauthn, secure, passkeys, login
Requires at least: 6.0
Requires PHP: 7.4
Tested up to: 6.7
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Secure Passkeys is a powerful WordPress plugin that enables passwordless authentication using WebAuthn technology.

== Description ==

Secure Passkeys is a powerful WordPress plugin that enables seamless passwordless authentication using WebAuthn technology. By eliminating the need for traditional passwords, it enhances security and improves the user login experience. With support for biometric authentication, security keys, and device-bound credentials, Secure Passkey provides a robust and user-friendly solution for modern authentication.

Unlike traditional password-based authentication, Secure Passkey leverages cryptographic key pairs to ensure secure logins. The private key remains securely stored on the user’s device, while the public key is registered with the WordPress site. This method protects against phishing attacks and password breaches, ensuring that only authorized users can gain access.

Secure Passkeys integrates effortlessly into WordPress, allowing users to register and manage their passkeys from their profile settings. Once registered, users can log in using their fingerprint, face recognition, or a hardware security key without the need to remember or enter a password.

== Features ==

* **Passwordless Login:** Secure authentication via WebAuthn with biometric devices, security keys, Touch ID, Face ID, and more.
* **Enhanced User Experience:**  Password-free login for a smoother user journey.
* **Integration Support:**
    * WordPress default login form
    * WooCommerce login page
    * MemberPress login form
    * Easy Digital Downloads login form
* **Admin Management:**  Administrators can delete, activate, or deactivate users directly from plugin settings or user profiles.
* **Activity Logging:**  Monitor activity logs and track last login/registration of passkeys.
* **Multiple Passkeys:** Supports multiple passkey registrations per user, with the option to set a registration limit or allow unlimited registrations.
* **Role Restrictions:** Restrict and exclude specific user roles from using passkey authentication.
* **Customizable Settings:**  Adjust timeout settings for passkey registration and login.
* **User Verification:** Enforce user verification for enhanced security.
* **Frontend Customization:** Easily customize frontend themes or add your own with basic frontend skills.
* **Theme Support:** Supports pre-built themes like YOOtheme (UIkit) for frontend shortcodes.
* **Shortcodes:** Embed passkey login and registration forms on custom frontend pages.
* **Passkey Display:** Show passkey details in admin user lists and profiles.
* **Multisite:** Supports WordPress Multisite and single-site installations.
* **Database Optimization:**  Option to allow or disallow automatic deletion of old challenge records and activity logs (configurable schedule).

= Requirements =

* WordPress 6.0 or newer.
* PHP version 7.4 or newer.

== Installation ==

= Minimum Requirements =

* PHP 7.4 or greater is recommended
* MySQL 5.6 or greater is recommended

= Automatic installation =

Automatic installation is the easiest option — WordPress will handles the file transfer, and you won’t need to leave your web browser. To do an automatic install of Secure Passkeys, log in to your WordPress dashboard, navigate to the Plugins menu, and click “Add New.”
 
In the search field type “Secure Passkeys” then click “Search Plugins.” Once you’ve found us,  you can view details about it such as the point release, rating, and description. Most importantly of course, you can install it by! Click “Install Now,” and WordPress will take it from there.

= Manual installation =

Manual installation method requires downloading the Secure Passkeys plugin and uploading it to your web server via your favorite FTP application. The WordPress codex contains [instructions on how to do this here](https://wordpress.org/support/article/managing-plugins/#manual-plugin-installation).


== Frequently Asked Questions ==

= How do I enable and configure the Secure Passkeys? =

After activating the plugin, a "Secure Passkeys" menu item will appear in your WordPress admin dashboard's sidebar.

= How can I add an ew theme for frontend shortc? =

You can add a custom theme for frontend shortcodes using the `secure_passkeys_themes` and `secure_passkeys_themes_paths` filters.

**Register the Theme:** Use the `secure_passkeys_themes` filter to register your new theme and make it available in the plugin settings.
`
<?php

add_filter('secure_passkeys_themes', function ($themes)
{
	$themes['new_theme'] = 'New Theme';
	return $themes;
}, 10, 1);
`

**Specify the Theme Path:** Use the `secure_passkeys_themes_paths` filter to define the file path to your custom theme's directory.

`
<?php

add_filter('secure_passkeys_themes_paths', function ($themes)
{
	$themes['new_theme'] = 'your/path/new/theme/folder';
	return $themes;
}, 10, 1);
`

**Override Template Files:**  Copy the template files you wish to customize from `secure-passkeys/src/views/frontend/default/` to your custom theme's folder (your/path/to/new/theme/folder).  Any files not copied to your custom theme folder will be loaded from the plugin's default theme, providing a fallback mechanism.  This allows you to customize only the files you need to change.

= Are there other filters and actions? =

Yes! The plugin offers a variety of filters and actions that allow developers to customize and extend its functionality. If you're a developer, we encourage you to explore these hooks and tailor the plugin to meet your specific needs.

For a complete list of available hooks and examples, refer to the plugin’s codebase.

== Changelog ==
= 1.0.0 2025-03-05 =
* Initial release.

== Upgrade Notice ==
= 1.0.0 =
This is the initial release of the Secure Passkeys plugin.

== Screenshots ==
1. Overview
2. Passkeys
3. Activity Log
4. General Settings
5. Display Settings
6. Advanced Settings
7. Admin Edit Profile and User Page
8. Admin Add New Passkey
9. Login

== License ==
Secure Passkeys is licensed under the GNU General Public License v2 or later.