Authentication

Connect your apps to ProcessWire! This module helps you to create api-endpoints, to which an app or an external service can connect to.

Stripe payment-link redirects, user/purchases, magic link, mails, modals.

Automatically email new users their account details, and optionally, automatically generate a password for them.

Persist user logins across browser sessions.

Force users to change their password.

Performs two-factor authentication by sending user an email with a code. Also works with email-to-SMS. Requires ProcessWire 3.0.109+.

For apps like Google Authenticator, Authy, and other TOTP-based authenticator applications. Requires ProcessWire 3.0.109+.

Add SAML authentication to any ProcessWire website

Check an entered password against the 10,000 most common passwords (From this blog: https://xato.net/passwords/more-top-worst-passwords/#.U5W5hnb5f6U) and return an error if a match is found.

Enables you to configure whether to allow session for each request based on configured rules. Requires PW 3.0.184 or newer.

For modern two factor authentication with U2F keys and on-device credentials like Fingerprints/Face

Enables login via Facebook account and PW user creation.

Grant/deny access to pages according to query string.

Connects ProcessWire with the Google Client Library and manages authentication.

E-Mail Verification and Domain Validation via API. Checks an email address against blacklist and availability of mailhost. Blacklisted domains and email addresses are simply stored in a text file.

Notify users of successful login or failed login attempts on their accounts.

ProcessWire module that enables login via a passkey

Restricts site access to visitors with a valid invite code. Designed for staging environments with multiple teams.

OneTimeOnlyCode creates one time only codes that can be used to access specific content

For two-factor authentication with security keys like Yubikey/Google Titan.

OAuth2 login for ProcessWire

Adds 2 factor login to PW using the PPP One-Time-Pad System.

Use your domain name as an IndieAuth provider

Normalize successful and failed login times to prevent timing attacks.

An implementation of Steve Gibson's Perfect Paper Passwords (PPP) system.

Adds support for enabling or disabling login for users, either instantly or by specifying a time range.