Features
Complete Auth Flows
Covers all authentication flows needed for membership sites: registration, login, logout, and password reset. Supports two-step registration with email verification.
Supported Auth Pages
- Registration — Email input → Confirmation email → Password setup → Complete
- Login / Logout
- Password Reset — Email input → Reset email → New password → Complete
Template Customization
On plugin activation, auth page template files are copied to your theme's auth/ directory. Edit these files to customize the design.
Template Files
header.php/footer.php— Header and footerlogin.php— Login formregister.php— Registration formlost-password.php— Password recovery formreset-password.php— Password reset formstyle.css— Auth page styles
reCAPTCHA Enterprise
Integrates Google reCAPTCHA Enterprise to prevent bot registrations and brute-force attacks. Enable it by adding a few constants to wp-config.php.
Security
Built following WordPress security best practices.
- Unified error handling with
WP_Error - CSRF protection with nonce tokens
- Password strength validation
- Email verification for identity confirmation
Flexible Configuration
Customize email addresses, redirect URLs, auth page slugs, and more through simple wp-config.php constants. See the Configuration page for details.
Lightweight Design
Minimal client-side JavaScript dependency with server-side rendering. Minimal performance impact on your site.