WordPress.org

Русский

  • Темы
  • Плагины
  • Новости
    • Документация
    • Форумы
  • О WordPress
  • Сообщество
  • Скачать WordPress
Скачать WordPress
WordPress.org

Plugin Directory

FluentAuth — The Ultimate Authorization & Security Plugin for WordPress

  • Отправить плагин
  • Мои избранные
  • Log in
  • Отправить плагин
  • Мои избранные
  • Log in

FluentAuth — The Ultimate Authorization & Security Plugin for WordPress

Автор: Shahjahan Jewel
Скачать
  • Детали
  • Отзывы
  • Установка
  • Разработка
Поддержка

Описание

Boost Your Website’s Security with Login/Signup Security, Two-Factor Email Authentication, Login/Logout Redirects, Social Logins, Detailed Audit Logs, and More. FluentAuth is the lightest and blazing fast security plugin for WordPress.

Highlighted Features

  • Two-Factor Authentication for Login
  • Magic Login via Email
  • Social Login / Register
  • Limit Login Attempts
  • Dynamic Login Redirects
  • Detailed Audit Logs
  • Core Security Enhancement
  • Security Email Notifications
  • Super Fast Solution
  • Restrict /wp-admin for low level user roles

🚀 Two-Factor Authentication for Login
Ensure secure access to your admin panel with Two-Factor Login via email for high-level user roles like Administrator / Editor. Even if a password gets compromised, only the right person will be able to log in with the additional authentication step.

🚀 Magic Login via Email
Simplify the login process for end users like customers and subscribers. No more password resets or forgotten passwords that cause users to leave your site. With our improved flow and features, users can log in to your site simply by typing their username or email address and clicking on a secure one-time use link sent to their email.

🚀 Social Login / Register
Allow users to log in to your site with their GitHub, Facebook or Google accounts. This feature is lightweight and easy to enable.

🚀 Limit Login Attempts
Protect your site against brute force attacks by blocking excessive login attempts. Our simple yet powerful tools also improve site security and performance, and allow for customizable lockout timings.

🚀 Dynamic Login Redirects
Easily redirect users to specific pages after they log in or log out. Our drag-and-drop builder lets you customize the login and logout flow for different types of businesses.

🚀 Detailed Audit Logs
Track exactly when users log in to your site and via which method (normal login form, magic URL, or social media) with our powerful audit logs.

🚀 Core Security Enhancement
XML-RPC is a common target for WordPress attacks, but most sites don’t actually need it. This plugin enables you to disable XML-RPC, Remote Application Login, and protect the wp-users listing for REST API for enhanced security.

🚀 Security Email Notifications
As a business owner, it’s important to know when high-level users like administrators, editors, and authors log in to your site, or if someone unauthorized is trying to log in. Our plugin includes email notifications to alert you of these events.

🚀 Super Fast Solution
We’ve built this plugin to be super-fast and simple yet powerful, using the latest technologies like WordPress REST-API, VueJS V3, Vue-Router, and Element-Plus for UI building. We also use custom database tables to store audit logs, so they don’t interfere with your default WordPress database tables.

🚀 Restrict /wp-admin for low level user roles
If you want to restrict /wp-admin access for subscribers or other low level user roles then you can easily enable that and select the user roles that you want to restrict /wp-admin access.

🚀 Customize WordPress Signup Emails
Customize the WordPress default signup emails with your own branding and content. This feature allows you to create a more personalized experience for your users, enhancing their engagement with your site.

🚀 Custom Login/Signup Shortcodes
Create custom login and signup forms using shortcodes. This feature allows you to easily integrate login and signup forms into your pages or posts, providing a seamless user experience.

🚀 Disable Admin Email Notifications on User Signup
Disable the default WordPress admin email notifications that are sent when a new user signs up. This feature helps you manage your email notifications more effectively, reducing clutter in your inbox.

🚀 Scan WordPress Core File Changes
FluentAuth includes a feature to scan WordPress core files for changes, helping you identify any unauthorized modifications. This is crucial for maintaining the integrity of your WordPress installation and ensuring that your site remains secure.

Why FluentAuth?

To improve the security and user experience of a WordPress website, the default authentication system may need to be enhanced with additional plugins. One common issue that WordPress site owners face is their site getting hacked. This is often due to hackers using brute-force attacks to guess passwords and gain access to the admin panel, leading to site takeover. Additionally, the use of common passwords on multiple sites can put all of them at risk if one password is compromised.

Using multiple security plugins can be detrimental to the performance of a WordPress website. These plugins, which are often bloated, intercept every WordPress request and run it through a large number of unnecessary rules, resulting in increased server resource usage and slower site performance. To avoid this issue, consider using a comprehensive security solution that offers multiple features in one package, instead of relying on multiple individual plugins. This will help save server resources and improve the overall performance of your website.

To Solve these issues, we decided to build FluentAuth and made it free.

Replace Multiple Plugins with FluentAuth

FluentAuth has been designed to provide light-weight security solution while adding better UX and performance of your site. If you use FluentAuth then you don’t need the following plugins

For Login Limit and ban brute force attacks

  • Limit Login Attempts Reloaded
  • WPS Limit Login

For Login & Logout Redirections

  • LoginWP (Formerly Peter’s Login Redirect)
  • Sky Login Redirect
  • WP Login and Logout Redirect

For Login & Logout Redirections

  • LoginWP (Formerly Peter’s Login Redirect)
  • Sky Login Redirect
  • WP Login and Logout Redirect

For Hide Admin Bar and Access Restriction

  • Hide Admin Bar
  • Hide Admin Bar Based on User Roles
  • Auto Hide Admin Bar
  • Hide Admin Bar from Non-Admins

User Guides

  • Getting Started with FluentAuth
  • Login / Logout Redirects
  • Register/Login Shortcodes in FluentAuth
  • Configure Login with GitHub
  • Configure Login with Google

Other Plugins By The Same Team

  • FluentCRM – Email Marketing, Newsletter, Email Automation and CRM Plugin for WordPress
  • Fluent Forms – Fastest WordPress Form Builder Plugin
  • Ninja Tables – Best WP DataTables Plugin for WordPress
  • Ninja Charts – Best WP Charts Plugin for WordPress
  • WPPayForm — Stripe Payments Plugin for WordPress
  • Mautic Integration For Fluent Forms
  • Fluent Forms PDF — PDF Entries for Fluent Forms
  • FluentSMTP — WordPress Mail SMTP, SES, SendGrid, MailGun Plugin

CONTRIBUTE

If you want to contribute to this project or just report a bug, you are more than welcome. Please check repository from Github.

Скриншоты

  • Reporting Dashboard
  • Login Security Settings
  • Social Logins Frontend
  • Custom Login/Signup Shortcodes
  • Dynamic Login Redirects
  • Detailed Audit Logs
  • Social Login Settings
  • System Emails Customization
  • Login/Signup Page Customizer
  • WordPress Core Files Integrity Check

Установка

This section describes how to install the plugin and get it working.

  1. Just search for FluentAuth in WordPress Plugins and click install and activate.

OR

  1. Upload the plugin files to the /wp-content/plugins/fluent-auth directory, or install the plugin through the WordPress plugins screen directly.
  2. Activate the plugin through the \’Plugins\’ screen in WordPress
  3. Use the FluentAuth -> Settings screen to configure the plugin

Часто задаваемые вопросы

Is it a GDPR-Compliant?

All the data will be saved and managed into WordPress. it’s 100% GDPR-Compliant.

Will it is a performance issue for WordPress?

Absolutely not! From the very first, We were careful about this. It stores all the logs data in custom database tables, so it will not affect your WordPress database. We built the application with VueJS. Also, The Admin UI is super fast as It’s a SPA and communicates over ajax.

Отзывы

Great

springbreak 16.06.2025
Works fluent 😉 Easy to config, clean UI, deliver what promised. Wish to stay and continue to develop!(more form customization would be great)

This Plugin is Amazing Specially works well with all the Fluent Family

knightraven 15.06.2025
This Plugin is Amazing Specially works well with all the Fluent Family

It could be so much better!

nucleotide 13.06.2025
This has so much potential, but I feel like this is the worst Fluent product available.It took months to close a major flaw (allowing anyone with a Gmail account to log in).It requires email for the 2FA codes — which breaks the login flow and creates a barrier (why not just use an existing app that generates the codes?) Still no way to restrict certain email addresses from registering (eg. myemail@domain.com or *@domain.com)I know it’s free… but we are talking about authentication and security here. FluentAuth just doesn’t do it well in my opinion. It’s not a plugin I feel I can trust — and that’s vitally important!

2.0 is a big improvement, but still needs some work.

jgardnerqha 09.06.2025
The new version 2.0 is a big improvement, but there’s still some bugs to be worked out. In particular, the Magic Login only seems to work periodically for me — I haven’t been able to find out if it’s simply incompatible with another plugin or if there’s another problem. Also, adding multi-factor authentication with a token authentication app (Google Authenticator, Authy, etc.) would be a huge improvement on this plugin, especially if MFA could be enforced for specific roles (i.e., Administrator).

Poor UI

binayg 29.05.2025
While other things are fine, The UI design is somewhat poor. The login/signup form doesn’t have proper separator marked with «Or» to separate the normal login with google social login, and is just using some horizontal line which is actually very clumsy. They have got «Or» for the magic login but for social login, it’s lacking. And this makes it very clumsy and unattractive for the users who are about to sign up.

ANYONE can get in using social login (GMail)!!!

kdwebfeedback 22.01.2025 3 ответа
At first, I found this plugin convenient and great until I realized that anyone can log in easily using GMail login despite having the registration disabled. Once an outsider logs in using GMail, the account is created automatically. So that’s a huge red flag! This «so-called-security» is rubbish! It shouldn’t let in anyone except for the users being added by the admins.
Посмотреть все 23 отзыва

Участники и разработчики

«FluentAuth — The Ultimate Authorization & Security Plugin for WordPress» — проект с открытым исходным кодом. В развитие плагина внесли свой вклад следующие участники:

Участники
  • Shahjahan Jewel
  • WPManageNinja
  • Mahmudul Hasan Arif

«FluentAuth — The Ultimate Authorization & Security Plugin for WordPress» переведён на 5 языков. Благодарим переводчиков за их работу.

Перевести «FluentAuth — The Ultimate Authorization & Security Plugin for WordPress» на ваш язык.

Заинтересованы в разработке?

Посмотрите код, проверьте SVN репозиторий, или подпишитесь на журнал разработки по RSS.

Журнал изменений

2.0.2 — Date: Jun 11, 2025

  • Fixed: Login Redirect Issue
  • Fixed Typo on Admin Menu
  • Fixed Styling Issues

2.0.0 — Date: Jun 09, 2025

  • Introduing Login/Signup Page Customizer
  • Added Login with Facebook
  • Added Syststem Emails Custimizations
  • Introducing WordPress Core Files Integrity Check
  • Configurable: One-Click Login via Email as primary login method
  • UI & UX Improvements
  • Disable Signup on social media connection when global signup is disabled

1.1.0 — Date: Dec 16, 2014

  • Added hooks for 3rd party developers
  • Improvement on Authentication flow

1.0.8 — Date: Dec 02, 2024

  • Added Additional Hooks for Regsitration and Signup
  • Improved UI & UX
  • Fixed translation issues

1.0.7 — Date: Jul 26, 2024

  • Added Email verification on User Regstration Flow
  • PHP 8.x compatability issue fixed
  • JS errors fixed on Magic Links Shortcodes

1.0.6 — Date: Jan 28, 2024

  • Fix Compatibility issue with PHP 8.x
  • Upgrade Internal Libraries
  • Improved Login with Google
  • Improved UI & UX

1.0.5 — Date: May 04, 2023

  • Added Login or Signup with Google Social Auth Connection
  • Magic Login URL token is now hashed to improve the security

1.0.4 — Date: Feb 04, 2023

  • Added Daily/Weekly/Monthly Email reporting Feature
  • Made Login Form as Custom (no login url expose)
  • Two-Factor Authentication Improvement

1.0.2 — Date: Dec 17, 2022

  • Fix UI issue on dashboard
  • Login with GitHub improvement
  • Do Two-Factor Authentication even for social login for selected user roles
  • Added more hooks for developers

1.0.2 — Date: Dec 16, 2022

  • Improved UI & UX
  • Added feature to block /wp-admin access and hide admin bar for low-level user roles
  • Fix conflict issue with LearnDash and other wp-users REST-API
  • Improved IP Address for login verification.

1.0.0 — Date: Dec 12, 2022

  • Initial Release

Мета

  • Версия 2.0.2
  • Обновление: 1 неделя назад
  • Активных установок: 8 000+
  • Версия WordPress 5.0 или выше
  • Совместим вплоть до: 6.8.1
  • Версия PHP 7.3 или выше
  • Языки

    Dutch, English (US), Japanese, Korean, Portuguese (Brazil) и Vietnamese.

    Перевести на ваш язык

  • Метки:
    login limitLogin Logsxml-rpc
  • Дополнительно

Оценки

3.7 из 5 звёзд.
  • 12 5-star reviews 5 звёзд 12
  • 0 4-star reviews 4 звезды 0
  • 6 3-star reviews 3 звезды 6
  • 3 2-star reviews 2 звезды 3
  • 2 1-star reviews 1 звезда 2

Добавить мой отзыв

See all reviews

Участники

  • Shahjahan Jewel
  • WPManageNinja
  • Mahmudul Hasan Arif

Поддержка

Решено проблем за последние 2 месяца:

0 из 1

Перейти в форум поддержки

  • О нас
  • Новости
  • Хостинг
  • Приватность
  • Витрина
  • Темы
  • Плагины
  • Паттерны
  • Обучение
  • Поддержка
  • Разработчики
  • WordPress.TV ↗
  • Присоединиться
  • События
  • Поддержать ↗
  • Пять для будущего
  • WordPress.com ↗
  • Matt ↗
  • bbPress ↗
  • BuddyPress ↗
WordPress.org
WordPress.org

Русский

  • Посетите нас в X (ранее Twitter)
  • Visit our Bluesky account
  • Посетите нашу ленту в Mastodon
  • Visit our Threads account
  • Посетите нашу страницу на Facebook
  • Посетите наш Instagram
  • Посетите нашу страницу в LinkedIn
  • Visit our TikTok account
  • Посетите наш канал YouTube
  • Visit our Tumblr account
Код — это поэзия.