Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2, or external token.
As of April 2026, JWT Authentication for WP REST APIs is a WordPress rest plugin with 20K+ active installations and a 4.4/5 rating from 73 reviews. It has been downloaded 493K+ times in total. Requires WordPress 3.0.1+ and PHP 5.6+. Available on WordPress.org since 2019. Recently updated within the last 3 months. Downloads are down 18% this week. Top alternative: Disable REST API.
WordPress REST API endpoints are open and unsecured by default which can be used to access your site data. Secure WordPress APIs from unauthorized users with our JWT Authentication for WP REST APIs plugin.
Our plugin offers below authentication methods to Protect WP REST API endpoints:
– JWT Authentication
– Basic Authentication
– API Key Authentication
– OAuth 2.0 Authentication
– External Token based Authentication 2.0/OIDC/JWT/Firebase provider’s token authentication methods.
You can authenticate default WordPress endpoints and custom-developed REST endpoints and third-party plugin REST API endpoints like that of Woocommerce, Learndash, Buddypress, Gravity Forms, CoCart, etc.
After 5 years of using the paid version of this plugin, I must say I am beyond impressed. We use this plugin to secure our API and manage the access keys for our REST API, and for nearly the entire time, it has worked flawlessly.
In the rare instances where I encountered an issue, the team behind this plugin proved to be absolute professionals. They didn’t just send generic replies; they scheduled screen-sharing sessions with me and solved every problem quickly and efficiently.
I want to give a special thanks to Vidushi Gupta. She has been incredibly helpful, kind, and professional throughout our interactions. Having someone like her to rely on makes all the difference.
I will likely remain a customer for at least another 5 years. They are professional, highly efficient, and their customer service is top-notch! If you are looking for a reliable company with a team of experts you can trust, this is the one.
Thank you so much, guys – and especially Vidushi – you are simply the best!
Great support from the MiniOrange team! Atul and Vidushi are very helpful and lightning fast to respond.
Swapnil was very helpful in resolving my issue. I enjoyed the support received by the mini orange team.
I needed support for some custom routes using miniOrang auth and support was great, helped me to solve my problems
Fast and easy support – even for the free version. Thank you
| WordPress | 3.0.1+ requiredTested up to 6.9.4 |
| PHP | 5.6+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.