Title: CS BioLogin — Seamless Biometric Authentication
Author: Concatstring Solutions
Published: 18.06.2026
Last modified: 28.09.2026
---
Поиск плагинов
# CS BioLogin — Seamless Biometric Authentication
Автор: [Concatstring Solutions](https://profiles.wordpress.org/concatstring/)
[Скачать](https://downloads.wordpress.org/plugin/cs-biologin-seamless-biometric-authentication.1.3.2.zip)
* [Детали](https://ru.wordpress.org/plugins/cs-biologin-seamless-biometric-authentication/#description)
* [Отзывы](https://ru.wordpress.org/plugins/cs-biologin-seamless-biometric-authentication/#reviews)
* [Установка](https://ru.wordpress.org/plugins/cs-biologin-seamless-biometric-authentication/#installation)
* [Разработка](https://ru.wordpress.org/plugins/cs-biologin-seamless-biometric-authentication/#developers)
[Поддержка](https://wordpress.org/support/plugin/cs-biologin-seamless-biometric-authentication/)
## Описание
**CS BioLogin** adds passwordless sign-in to WordPress using the WebAuthn standard(
FIDO2 / passkeys). Visitors can authenticate with Face ID, Touch ID, Windows Hello,
or a platform fingerprint reader. Biometric templates never leave the user’s device;
only public key credentials are stored in your WordPress database.
👉 See this plugin in context with our other products: [Concatstring Labs Product Page](https://labs.concatstring.com/products/cs-biologin-seamless-biometric-authentication)
#### Guide For Fingerprint Authentication
[User Guide](https://concatstring.com/blog/cs-biologin-seamless-biometric-authentication-user-guide)
#### What this plugin does
* Adds a **Sign in with Biometrics** option on the WordPress login screen, with
password login still available unless Force Biometric Login is enabled.
* Lets logged-in users **register, rename, update, and remove** passkeys from their
profile, a front-end shortcode page, or WooCommerce My Account.
* Provides an admin screen for **settings, security logs, and per-user device management**.
* Applies **rate limiting and lockout** on authentication attempts.
#### What this plugin does NOT do
* It does **not** send user data, credentials, or biometrics to third-party servers.
All verification runs on your site over HTTPS.
* It does **not** store fingerprint or face images, only WebAuthn public keys and
device metadata you configure.
#### How it works
1. **Administrator** enables the plugin under **Biometric Login** and, if needed,
restricts specific roles from using biometrics.
2. **User** opens their profile (WordPress admin profile, `[csbisebi_device_manager]`
page, or WooCommerce **My Account CS BioLogin**) and clicks **Add Biometric Device**.
The browser shows the OS passkey/biometric prompt.
3. **Login**, on `wp-login.php` (or WooCommerce login), the user chooses biometric
sign-in. The plugin issues a WebAuthn challenge via the REST API, verifies the
signed response, and creates a normal WordPress session.
REST routes live under `csbisebi-biometric-login/v1` on your own site (for example`/
wp-json/csbisebi-biometric-login/v1/auth/options`). No external API keys are required.
#### WooCommerce
When WooCommerce is active, CS BioLogin adds a **My Account** tab, checkout/account
login prompts, and automatic use of the account area instead of a standalone management
page.
#### Requirements
* WordPress 6.2 or later
* PHP 7.4+ with OpenSSL
* **HTTPS** on production (WebAuthn requires a secure context; `localhost` and `*.
local` are allowed for development)
#### Privacy and data storage
* Biometric samples stay on the user’s device.
* The plugin stores passkey public keys, optional device labels, timestamps, and
security log entries in your WordPress database.
* Uninstalling the plugin (when data removal is enabled via uninstall) drops the
custom credentials table and plugin options.
## Скриншоты
[⌊Biometric login popup on the WordPress login page.⌉⌊Biometric login popup on the
WordPress login page.⌉[
Biometric login popup on the WordPress login page.
[⌊Device management in WooCommerce My Account.⌉⌊Device management in WooCommerce
My Account.⌉[
Device management in WooCommerce My Account.
[⌊Registration flow with browser prompt.⌉⌊Registration flow with browser prompt.⌉[
Registration flow with browser prompt.
[⌊Admin settings page with security options.⌉⌊Admin settings page with security
options.⌉[
Admin settings page with security options.
[⌊Security logs showing login events.⌉⌊Security logs showing login events.⌉[
Security logs showing login events.
## Установка
1. Upload the plugin folder `cs-biologin-seamless-biometric-authentication` to `/wp-
content/plugins/` (the zip must contain `readme.txt` and `cs-biologin.php` at the
root of that folder, not inside a `trunk/` subfolder).
2. Activate **CS BioLogin — Seamless Biometric Authentication** on the **Plugins**
screen.
3. Ensure your site uses **HTTPS** in production.
4. Go to **Biometric Login** and save your preferences.
5. Log in as a test user, open **Users Profile** (or WooCommerce **My Account CS
BioLogin**), and register a passkey before testing front-end login.
## Часто задаваемые вопросы
### Does this store my fingerprint or face on the server?
No. WebAuthn keeps biometrics on the device. The site only stores a public key used
to verify future logins.
### Does the plugin call external services?
No. Challenges, verification, and credential storage all run on your WordPress installation.
JavaScript and CSS are bundled with the plugin (no third-party CDNs).
### Is HTTPS required?
Yes, for production sites. The plugin shows an admin notice if HTTPS is missing (
localhost and `.local` hosts are exempt for development).
### Can users still log in with a password?
Yes, unless the administrator enables **Force Biometric Login**, which blocks password
sign-in for any account that already has a registered passkey. Accounts without
one yet can still use their password until they set one up.
### Is WooCommerce supported?
Yes. Device management appears under **My Account**, and biometric login can appear
on WooCommerce login forms when enabled.
### Password managers block the biometric prompt. What should I do?
Extensions such as 1Password, Bitwarden, or LastPass may intercept passkey prompts.
Enable passkey support in the manager or disable autofill for your site so the native
OS dialog (Touch ID, Face ID, Windows Hello) can appear.
### Can administrators manage user devices?
Yes. Use **Biometric Login User Management** to reset devices, view logs, and register
passkeys on behalf of users (with appropriate capability checks). To remove every
registered device for every user in one action, use the «Reset All Devices for All
Users» button in the Security Settings tab’s Danger Zone: it requires typing a confirmation
phrase and is logged to the Security Logs.
### What shortcodes does this plugin provide?
**`[csbisebi_device_manager]`**: Renders the full «Manage Biometric Devices» panel:
registered device list, add/rename/remove controls, and a registration form. Only
visible to logged-in users; logged-out visitors see a «Please log in» notice instead.
The plugin auto-creates a page containing this shortcode on activation.
**`[csbisebi_login_button]`**: Renders only a «Login with Biometrics» trigger button,
safe to place inside a normal page, a widget, or a page-builder popup (e.g. Elementor).
It prints nothing at all for a visitor who is already logged in. What happens on
click is controlled by **Biometric Login Implementation Popup Behavior**:
* **Show the sign-in popup** (default): opens a popup with the biometric prompt
plus optional password/register buttons.
* **Authenticate directly**: skips the popup and triggers the biometric prompt
immediately.
### What filter hooks does this plugin provide for developers?
All filters below can be added to your theme’s `functions.php` or a site-specific
plugin.
**`csbisebi_button_text`**: Change the biometric login button’s text everywhere
it appears (login screen, `[csbisebi_login_button]` shortcode, WooCommerce account
button), overriding the «Button Text» UI setting.
```
add_filter( 'csbisebi_button_text', function ( $text ) {
return 'Sign in with Face ID';
} );
```
**`csbisebi_popup_header_icon`**: Replace the fingerprint icon shown in the sign-
in popup’s header. Return raw HTML/SVG markup; return an empty string (the default)
to keep the built-in, theme-colored fingerprint icon.
```
add_filter( 'csbisebi_popup_header_icon', function ( $icon_html ) {
return '
';
} );
```
**`csbisebi_popup_heading_title`**: Change the heading title in the sign-in popup’s
header (defaults to the site name).
```
add_filter( 'csbisebi_popup_heading_title', function ( $title ) {
return 'Welcome back!';
} );
```
**`csbisebi_popup_guest_notice`**: Change the helper text shown under the popup
header about guest/private browsing windows.
```
add_filter( 'csbisebi_popup_guest_notice', function ( $text ) {
return 'Using a private window? You may need your phone or a security key instead.';
} );
```
**`csbisebi_popup_footer_text`**: Change the privacy note shown at the bottom of
the sign-in popup (next to the green checkmark icon).
```
add_filter( 'csbisebi_popup_footer_text', function ( $text ) {
return 'Your biometric data stays on your device.';
} );
```
**`csbisebi_force_biometric_enabled`**: Override whether «Force Biometric Login»
is enforced, independent of the saved setting. Return `false` to force it off (e.
g. from a must-use plugin or an emergency break-glass hook) without touching the
database.
```
add_filter( 'csbisebi_force_biometric_enabled', function ( $enabled ) {
return false;
} );
```
**`csbisebi_plugin_name`**: Change the plugin’s display name shown in menus, headings,
and the WooCommerce account tab.
```
add_filter( 'csbisebi_plugin_name', function ( $name ) {
return 'ABCD Passkey Login';
} );
```
## Отзывы
Нет отзывов об этом плагине.
## Участники и разработчики
«CS BioLogin — Seamless Biometric Authentication» — проект с открытым исходным кодом.
В развитие плагина внесли свой вклад следующие участники:
Участники
* [ Concatstring Solutions ](https://profiles.wordpress.org/concatstring/)
* [ Adarsh Verma ](https://profiles.wordpress.org/shobhit2412/)
* [ Kakshak Kalaria ](https://profiles.wordpress.org/kakshak/)
* [ Sumit Tejani ](https://profiles.wordpress.org/sumittejani/)
* [ Hardik Patel ](https://profiles.wordpress.org/hlakkad1998/)
* [ Vrutika Darji ](https://profiles.wordpress.org/vrutti22/)
[Перевести «CS BioLogin — Seamless Biometric Authentication» на ваш язык.](https://translate.wordpress.org/projects/wp-plugins/cs-biologin-seamless-biometric-authentication)
### Заинтересованы в разработке?
[Посмотрите код](https://plugins.trac.wordpress.org/browser/cs-biologin-seamless-biometric-authentication/),
проверьте [SVN репозиторий](https://plugins.svn.wordpress.org/cs-biologin-seamless-biometric-authentication/),
или подпишитесь на [журнал разработки](https://plugins.trac.wordpress.org/log/cs-biologin-seamless-biometric-authentication/)
по [RSS](https://plugins.trac.wordpress.org/log/cs-biologin-seamless-biometric-authentication/?limit=100&mode=stop_on_copy&format=rss).
## Журнал изменений
#### 1.3.2
* Fixed passkey registration silently failing with no error on non-HTTPS connections;
a clear «requires HTTPS» message is now shown and the Register button is disabled
instead.
* Fixed a JavaScript error on the profile/device-management screen («Cannot access‘
statusEl’ before initialization») that prevented any status message, including
the new HTTPS warning, from ever being shown.
#### 1.3.1
* Fixed the «not served over HTTPS» admin notice incorrectly staying hidden on `.
local` development domains (e.g. Local by Flywheel) that are not actually running
HTTPS.
* Added a note on the «Show ‘Use Password Instead’ Button» setting explaining that
it has no effect while «Force Biometric Login» is enabled, instead of silently
doing nothing.
* Fixed the «Popup Behavior» setting (Implementation tab) only affecting the `[
csbisebi_login_button]` shortcode; it now also controls whether the WordPress
login page shows the sign-in popup automatically or offers biometric login inline.
* Added a «Filter» button disabled state and a dismissible warning notice on the
Security Logs screen when the Filter button is submitted with no search term
or date range selected.
* Added an «Apply» button inside the Logs screen’s Columns panel so column visibility
changes can be submitted without needing to also use the separate Filter button.
* Added future-date restriction to the Security Logs date range filters, based
on the site’s current date.
* Added a loading indicator for the Primary/Secondary/Text color pickers in UI
Settings, shown until the color picker widget finishes initializing.
* Reduced UI Settings color picker load time by only loading its assets on the
UI Settings tab instead of every tab of the plugin’s admin page.
#### 1.3.0
* Added a «Restrict Roles» switch, replacing the old Allowed Roles list, enforced
at both passkey registration and login.
* Added a working «Force Biometric Login» setting that blocks password login for
accounts with a registered passkey, exempting accounts that have not registered
one yet, plus a `csbisebi_force_biometric_enabled` filter for developers.
* Added «Require Re-Authentication» enforcement for adding and removing a device,
confirmed with your account password.
* Added the `[csbisebi_login_button]` shortcode, a login button safe to use inside
Elementor popups and other page builders, replacing the old custom CSS selector
setting. It now prints nothing for a visitor who is already logged in.
* Added a «Popup Behavior» setting (Implementation tab) so the `[csbisebi_login_button]`
shortcode can either open the sign-in popup (default) or authenticate directly
on click.
* Added «Show ‘Use Password Instead’ Button» and «Show ‘Register a New Account’
Button» toggles (UI Settings tab) to hide either option from the sign-in popup.
* Removed the «Show Icon on Button» setting: it had no effect. Added the `csbisebi_button_text`
filter for developers who want to override the button label in code instead.
* Removed the «Hide Button on Unsupported Browsers» setting: it had no effect.
Unsupported browsers now log a console warning instead.
* Added `csbisebi_popup_header_icon`, `csbisebi_popup_heading_title`, `csbisebi_popup_guest_notice`,
and `csbisebi_popup_footer_text` filters to let developers override the sign-
in popup’s header icon, heading, guest-window notice, and footer text.
* Documented all shortcodes and developer filter hooks in the FAQ.
* Renamed the Security Settings tab’s URL slug from `tab=advanced` to `tab=security-
settings`.
* Added a «Danger Zone» section on the Security Settings tab with a «Reset All
Devices for All Users» action (admin-only, phrase-confirmed), which removes every
registered biometric device site-wide and records a `global_reset` entry in the
security logs.
* Added Role and Last Activity columns to the User Management table, sourced from
the security logs.
* Added a dismissible WordPress.org review notice on the settings page.
* Fixed the device name entered during registration not being used as the passkey’s
name in the browser or OS passkey picker.
* Renamed «Advanced Settings» to «Security Settings» and moved related settings
into it.
* Redesigned the settings screens with toggle switches and CS BioLogin brand colors.
* Removed unused legacy settings, Allow Password Fallback and Allow REST Account
Registration, that had no effect.
* General code cleanup for WordPress and VIP coding standards.
#### 1.2.2
* Moved security log storage from option table to custom table
* Filter/search logs logs
* Fixed the issue where logs was not showing correct browser.
#### 1.2.1
* Fixed the minor issue where activating the plugin triggered, fatal error.
#### 1.2.0
* Fixed the issue where, the registration working when ZOHO vault is enabled
* Added i18n support in js files for translation
#### 1.0.0
* Initial release on the WordPress Plugin Directory.
* WebAuthn / FIDO2 / Passkeys registration and authentication (ES256 and RS256).
* Passwordless login on the WordPress login screen with optional password fallback.
* WooCommerce: My Account endpoint, checkout and account login popups, and device
management UI.
* Multi-device support with rename, update passkey, remove, and duplicate-device
handling.
* Admin settings (roles, force biometric, rate limits, lockout, UI options) plus
security event logs and user device management.
* Passkey setup reminder banner for users without a registered device.
* No external services or CDNs; credentials stored locally in the database.
## Мета
* Версия **1.3.2**
* Обновление: **2 недели назад**
* Активных установок: **Менее 10**
* Версия WordPress ** 6.2 или выше **
* Совместим вплоть до: **7.1.3**
* Версия PHP ** 7.4 или выше **
* Язык
* [English (US)](https://wordpress.org/plugins/cs-biologin-seamless-biometric-authentication/)
* Метки:
* [biometric](https://ru.wordpress.org/plugins/tags/biometric/)[fingerprint](https://ru.wordpress.org/plugins/tags/fingerprint/)
[login](https://ru.wordpress.org/plugins/tags/login/)[security](https://ru.wordpress.org/plugins/tags/security/)
[webauthn](https://ru.wordpress.org/plugins/tags/webauthn/)
* [Дополнительно](https://ru.wordpress.org/plugins/cs-biologin-seamless-biometric-authentication/advanced/)
## Оценки
Пока что нет ни одного отзыва.
[Ваш отзыв](https://wordpress.org/support/plugin/cs-biologin-seamless-biometric-authentication/reviews/#new-post)
[Посмотреть всеотзывы](https://wordpress.org/support/plugin/cs-biologin-seamless-biometric-authentication/reviews/)
## Участники
* [ Concatstring Solutions ](https://profiles.wordpress.org/concatstring/)
* [ Adarsh Verma ](https://profiles.wordpress.org/shobhit2412/)
* [ Kakshak Kalaria ](https://profiles.wordpress.org/kakshak/)
* [ Sumit Tejani ](https://profiles.wordpress.org/sumittejani/)
* [ Hardik Patel ](https://profiles.wordpress.org/hlakkad1998/)
* [ Vrutika Darji ](https://profiles.wordpress.org/vrutti22/)
## Поддержка
Есть что сказать? Нужна помощь?
[Перейти в форум поддержки](https://wordpress.org/support/plugin/cs-biologin-seamless-biometric-authentication/)