atshift Freeform Login

atshift Freeform Login adds server-verified passkey registration and login to WordPress while keeping the standard WordPress authentication flow and password fallback. Passkeys let users sign in with a device's biometric authentication, PIN, or security key instead of typing a username and password. Because each credential is created for this site, passkeys reduce the risks of phishing and password reuse. Users can register, name, and remove up to five passkeys from the standard WordPress profile screen. The current registration count is shown from 0/5 through 5/5. Synced passkeys may also be available on other devices using the same storage account. After the first passkey is registered on the site, a passkey login button appears on the WordPress login screen and in the [atshift_login] shortcode. If WP-Members or another plugin already provides the username and password form, [atshift_passkey_login] can add only the passkey button beside it. Username and password login remains available as a fallback, so users should keep a long, unique password and store it in a password manager. Passkey support is available on PHP 8.3 or newer when the PHP JSON and OpenSSL extensions are enabled and the site uses HTTPS. Localhost is supported for development. The rest of the plugin continues to run on its stated minimum PHP version when the passkey module is unavailable. Passkey ceremonies are verified on the WordPress server and do not require an external authentication service. The bundled WebAuthn and supporting libraries are MIT licensed; package names and exact versions are recorded in composer.lock. When atshift User Profile Fields is active, its optional Passkeys field can place the same management controls within the configured profile layout. Credentials and authentication remain managed by atshift Freeform Login. Login screen design and shortcodes The plugin also customizes the standard WordPress login screen without replacing WordPress authentication. The free version includes background colors and images, a site-title brand display, form placement and width, core color controls, responsive fallback, a live preview, the login shortcode, and Jetpack SSO compatibility. When Jetpack SSO is active, its WordPress.com login UI is styled without replacing Jetpack authentication. The shortcode uses Jetpack automatically and respects Jetpack settings that hide or bypass the local login form. Use [atshift_login jetpack="hide"] only when local username and password login remains available. English is provided by the plugin source. Bundled translations are included for Japanese, Spanish, German, French, Brazilian Portuguese, Italian, Russian, Dutch, Simplified Chinese, Polish, Turkish, Indonesian, Traditional Chinese (Taiwan), and Korean.

1. Upload the plugin folder to /wp-content/plugins/.
2. Activate the plugin.
3. Open Settings > atshift Freeform Login in the WordPress administration menu.
4. Configure and save the design.
5. Enable login-screen application after reviewing the preview.
6. On PHP 8.3 or newer, open Users > Profile to register a passkey.
7. To add the complete login form to a page, insert [atshift_login].
8. If another plugin already provides the login form, insert [atshift_passkey_login] where only the passkey button should appear.
9. If another plugin provides a frontend profile page, insert [atshift_passkey_profile] where the current user should manage passkeys.

Shortcode examples:

• Complete form with a redirect: [atshift_login redirect="/my-account/"]
• Passkey button with a redirect: [atshift_passkey_login redirect="/my-account/"]
• Passkey button with a persistent login cookie: [atshift_passkey_login remember="true"]
• Passkey management without a duplicate heading: [atshift_passkey_profile heading="false"]

For every attribute and examples of passkey-only login and frontend-profile integration, see the Shortcode Guide.

2.3.1

• Limited each account to five registered passkeys and displayed the current count from 0/5 through 5/5.
• Hardened passkey registration limits, profile management permissions, and multisite handling.

2.3

• Added the [atshift_passkey_profile] shortcode for placing current-user passkey registration and management controls on frontend profile pages.
• Added self-only management, cache prevention, and search-index protection for frontend passkey profile integration.
• Updated compatible bundled Symfony dependencies to their latest 7.4 patch releases.

2.2

• Added bundled translations for Spanish, German, French, Brazilian Portuguese, Italian, Russian, Dutch, Simplified Chinese, Polish, Turkish, Indonesian, Traditional Chinese (Taiwan), and Korean.
• Standardized passkey, authentication, and WordPress interface terminology across the bundled translations.

2.1.1

• Reviewed standalone operation and integrations between atshift projects with Codex Security Check, fixing potential defects and security issues and applying additional hardening.
• Made other minor fixes.

2.1.0

• Added the [atshift_passkey_login] shortcode for placing a standalone passkey button beside an existing login form.
• Added same-site redirect, persistent-login, and custom-class options for the standalone passkey button.
• Improved the position of the WordPress 7.1 Remember Me help bubble across login layouts.
• Added official shortcode documentation and integration examples.

2.0.1

• Standardized the plugin action and metadata links shown on the Plugins screen.

2.0

• Added server-verified passkey registration and passwordless login on supported PHP 8.3 or newer HTTPS sites.
• Added profile management for multiple named passkeys with registration and last-used dates.
• Added passkey login to the WordPress login screen and [atshift_login] shortcode alongside the existing password fallback.

0.9.3-beta.3

• Confirmed compatibility with WordPress 7.1 RC3.
• Replaced long placement menus with a visual position picker.
• Added responsive placement controls that switch cleanly between one and two columns.
• Improved live-preview language visibility and placement labels.

0.9.3-beta.2

• Reordered form and background placement options from left to right, with each column arranged from top to bottom.
• Clarified placement labels in English and Japanese.

0.9.3-beta.1

• Added introductory text alignment and site-tagline defaults.
• Added add-on-aware settings navigation and Pro upgrade links.
• Improved form placement, background positioning labels, notices, and live-preview cache handling.

0.9.2-beta.3

• Added background type controls, introductory text, and a cropped wide-logo option.
• Improved automatic interaction colors and login-screen compatibility styling.
• Refined the live preview and grouped conditional settings for clearer editing.

0.9.1-beta.1

• Moved the design screen under Settings > atshift Freeform Login.
• Added product illustration and plugin icon source assets for GitHub and future directory use.

0.9.0-beta.1

• Public beta with responsive login customization, shortcode output, and Jetpack SSO compatibility.