IndieAuth
IndieAuth is a way to allow users to use their own domain to sign into other websites and services.
5(4 reviews)
·400 active installs·Updated 5 months agoAs of April 2026, IndieAuth is a WordPress login plugin with 400 active installations and a 5/5 rating from 4 reviews. It has been downloaded 30K+ times in total. Requires WordPress 6.2+ and PHP 7.4+. Available on WordPress.org since 2013. Top alternative: WPS Hide Login.
5/54 reviews
400active installs
30K+total downloads
13 yearssince 2013
Overview
The plugin turns WordPress into an IndieAuth endpoint. This can be used to act as an authentication mechanism for WordPress and its REST API, as well as an identity mechanism for other sites. It uses the URL from the profile page to identify the blog user or your author url. We recommend your site be served over https to use this.
measure then updates must be made.You can also install this plugin to enable web sign-in for your site using your domain.
Ratings & Reviews
54 reviews
5 ★
4
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 6.2+ requiredTested up to 6.7.5 |
| PHP | 7.4+ required |
Top Alternatives to IndieAuth
Frequently Asked Questions
Changelog
Project and support maintained on github at indieweb/wordpress-indieauth.
4.5.5
- Security: Fix CSRF vulnerability in authorization endpoint
- Security: PKCE mandatory in the IndieAuth spec is no longer optional in the plugin. If your client does not support this security measure then updates must be made.
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.