JWT Auth – WordPress JSON Web Token Authentication
Create JSON Web Token Authentication in WordPress.
5(22 reviews)
·6.0K+ active installs·Updated 1 year agoAs of April 2026, JWT Auth is a WordPress jwt plugin with 6.0K+ active installations and a 5/5 rating from 22 reviews. It has been downloaded 107K+ times in total. Requires WordPress 5.2+ and PHP 7.2+. Available on WordPress.org since 2020. Last updated 1 year ago — may have compatibility concerns. Downloads are up 158% this week. Top alternative: JWT Authentication for WP REST API.
5/522 reviews
6.0K+active installs
107K+total downloads
6 yearssince 2020
Overview
WordPress JSON Web Token Authentication allows you to do REST API authentication via token. It is a simple, non-complex, and easy to use. This plugin probably is the most convenient way to do JWT Authentication in WordPress.
- Support & question: WordPress support forum
- Reporting plugin’s bug: GitHub issues tracker
- Discord channel also available for faster response.
Upgrading to v3
When updating from v2 to v3, familiarise yourself with its changes to ensure that your site continues to work as expected:
New: Refresh tokens ([docs](https://github.com/usefulteam/jwt-auth#refreshing-the-access-token))
Key changes:
- Default JWT access token expiry time has been reduced from 7 days to 10 minutes.
- On expiry of a JWT, clients need to retrieve a new access token using the refresh token a…
Ratings & Reviews
522 reviews
5 ★
22
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Recent Reviews
It simply works!
by maidot·2 years ago
Tried other plugins, had problems with them and this one simply works and that’s it.
This is a properly developed plugin. Keep it up!
Good Work
by gunberi·2 years ago
The simplest and most useful plugin
Perfect Plugin
by Gagan·2 years ago
Works perfect.
Thank You!
Awesome plugin
by bilskirnir·2 years ago
Exactly what I was looking for
best jwt auth plugin
by Julian Lang·2 years ago
works perfect, a lot of useful filters, no advertising or brand prefixes. you can transform your wp to a nice headless backend with this
Download Trends
Today: 278Yesterday: 287This week: 2KPeriod total: 22K
Compatibility
| WordPress | 5.2+ requiredTested up to 6.5.8 |
| PHP | 7.2+ required |
Version Adoption
v3.0
60.0%
v2.1
30.5%
v0.1
5.2%
Other
4.3%
Top Alternatives to JWT Auth – WordPress JSON Web Token…
Frequently Asked Questions
Changelog
3.0.2
- Fix: Do not revalidate authentication headers if a valid user was determined already. (#75)
- Fix: Added debugging timeframe before purging refresh tokens. (#93)
- Fix: Fixed unnecessary user account lookup for device listing on user profile page. (#84)
- Fix: Added more granular refresh token validation error messages. (#78)
- Fix: Added integration for new CORS filter hook rest_allowed_cors_headers in WordPress 5.5.0. (#97)
…and 1 more changes
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.