This plugin allows sign in to WordPress using a JSON Web Token (JWT) contained in a HTTP Header.
As of April 2026, AH JWT Auth is a WordPress jwt plugin with 10 active installations and a 0/5 rating0. It has been downloaded 2.5K+ times in total. Requires WordPress 4.7+ and PHP 7.0+. Available on WordPress.org since 2021. Last updated 1 year ago — may have compatibility concerns. Top alternative: JWT Authentication for WP REST API.
This plugin allows sign in to WordPress using a JSON Web Token (JWT) contained in a HTTP Header that is added by a reverse proxy
that sits in front of your WordPress deployment.
Authentication and optionally role assignment is handled by claims contained in the JWT.
Verification of the JWT is handled by either:
During the login process if the user does not exist an account will be created with a matching role from the JWT.
If the JWT did not contain a role claim then user is created with the role set in the plugin settings (by default this is the subscriber role).
| WordPress | 4.7+ requiredTested up to 6.7.5 |
| PHP | 7.0+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.