Title: AuthLatch
Author: Rayhan Sardar
Published: <strong>2026 年 8 月 27 日</strong>
Last modified: 2026 年 8 月 27 日

---

搜尋外掛

![](https://ps.w.org/authlatch/assets/banner-772x250.png?rev=3668985)

![](https://ps.w.org/authlatch/assets/icon.svg?rev=3668985)

# AuthLatch

 由 [Rayhan Sardar](https://profiles.wordpress.org/madc0de/) 開發

[下載](https://downloads.wordpress.org/plugin/authlatch.1.0.2.zip)

 * [詳細資料](https://tw.wordpress.org/plugins/authlatch/#description)
 * [使用者評論](https://tw.wordpress.org/plugins/authlatch/#reviews)
 *  [安裝方式](https://tw.wordpress.org/plugins/authlatch/#installation)
 * [開發資訊](https://tw.wordpress.org/plugins/authlatch/#developers)

 [技術支援](https://wordpress.org/support/plugin/authlatch/)

## 外掛說明

AuthLatch helps site owners replace routine password logins with secure passwordless
access.

Key features:

 * One-time magic links requested by username or email, with expiry and one-use 
   tokens.
 * Passkey login using WebAuthn/FIDO2.
 * Self-service AuthLatch sidebar page for selected user roles.
 * Users can add, revoke, and name their own passkeys.
 * Users can send a magic login link to their own account email.
 * Per-role passkey access and per-user passkey limits.
 * Branded responsive login screen with method tabs for magic links, passkeys, and
   password fallback.
 * Single active session control.
 * Admin-generated login links with optional IP binding and auto logout.
 * Admin-scoped login links that can block selected admin menus for that session.
 * Built-in SMTP settings for hosts where PHP mail delivery is disabled.
 * Audit log for important authentication events.
 * RTL-friendly login UI.

AuthLatch stores magic-link validators as hashes, verifies passkeys server-side,
and uses WordPress capabilities, nonces, sanitization, and escaping throughout the
admin interface.

### Setup

#### Magic links

 1. Enable Magic links in AuthLatch > Settings.
 2. Set the default link expiry.
 3. Configure the email subject and body.
 4. Configure SMTP if the host disables PHP mail.
 5. Users can request a login link from the login page with either username or email.
 6. Enabled self-service roles can also send a login link from AuthLatch in the admin
    sidebar.

#### Passkeys

 1. Enable Passkeys in AuthLatch > Settings.
 2. Select the roles allowed to use passkeys.
 3. Set the maximum passkeys per user.
 4. Use HTTPS on the live site.
 5. Users with allowed roles can open AuthLatch in the admin sidebar and click Add 
    passkey.
 6. Users can revoke old passkeys from the same page.

#### Self-service sidebar page

 1. Open AuthLatch > Settings.
 2. Select roles under Self-Service Page > Sidebar access roles.
 3. Only selected roles will see the AuthLatch sidebar page.
 4. The self-service page lets users manage their own passkeys and send a magic link
    to their own email.

#### Password fallback

 1. Keep Username/password login enabled if normal WordPress login should remain available.
 2. Keep admin password fallback enabled if administrators should still be able to 
    log in with a password when password login is otherwise disabled.

#### SMTP

 1. Enable Use SMTP for WordPress emails.
 2. Enter host, port, encryption, username, password, from email, and from name.
 3. Save settings.
 4. Send a test email from AuthLatch > Settings.

### Privacy

AuthLatch stores authentication-related records in the WordPress database, including
hashed magic-link tokens, passkey public-key data, hashed IP values for audit and
optional IP binding, and configuration settings. AuthLatch does not store plaintext
magic-link validators. SMTP passwords are encrypted with WordPress salts before 
storage.

### Third-Party Libraries

AuthLatch includes the MIT-licensed lbuchs/WebAuthn library for WebAuthn/FIDO2 server-
side verification.

## 安裝方式

 1. Upload the plugin ZIP through Plugins > Add New > Upload Plugin.
 2. Activate AuthLatch.
 3. Open AuthLatch > Settings from the WordPress admin sidebar.
 4. Configure magic links, passkeys, self-service roles, branding, and SMTP if needed.
 5. Save settings.
 6. Send a test SMTP email before relying on email-only login.

## 常見問題集

### Does AuthLatch require a separate SMTP plugin?

No. AuthLatch includes SMTP settings and uses WordPress PHPMailer.

### Does passkey login require HTTPS?

Yes. WebAuthn passkeys require a secure browser context, usually HTTPS. Localhost
is generally allowed for development.

### Where does a user add a passkey?

Allowed users can open AuthLatch from the WordPress admin sidebar and use Add passkey.
Passkeys can also be managed from the WordPress profile page.

### Can administrators keep password login as a fallback?

Yes. The settings include an administrator password fallback option.

### Can users request magic links for their own account?

Yes. If their role is selected in Self-Service Page settings, users can open AuthLatch
in the sidebar and send a login link to their account email.

### Does AuthLatch send data to an external service?

AuthLatch does not send authentication data to an AuthLatch service. If SMTP is 
enabled, email is sent through the SMTP server configured by the site administrator.

## 使用者評論

這個外掛目前沒有任何使用者評論。

## 參與者及開發者

以下人員參與了開源軟體〈AuthLatch〉的開發相關工作。

參與者

 *   [ Rayhan Sardar ](https://profiles.wordpress.org/madc0de/)

[將〈AuthLatch〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/authlatch)

### 對開發相關資訊感興趣？

任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/authlatch/)、查看
[SVN 存放庫](https://plugins.svn.wordpress.org/authlatch/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/authlatch/?limit=100&mode=stop_on_copy&format=rss)
訂閱[開發記錄](https://plugins.trac.wordpress.org/log/authlatch/)。

## 變更記錄

#### 1.0.2

 * Updated compatibility metadata for WordPress 7.1.

#### 1.0.1

 * Updated compatibility metadata for WordPress 7.0.

#### 1.0.0

 * Initial WordPress submission release.
 * Added role-gated self-service AuthLatch sidebar page.
 * Added user-managed passkey registration and revocation from the sidebar.
 * Added user self-service magic-link email action.
 * Added plugin action link for settings.

## 中繼資料

 *  版本 **1.0.2**
 *  最後更新 **4 週前**
 *  啟用安裝數 **少於 10 次**
 *  WordPress 版本需求 ** 6.4 或更新版本 **
 *  已測試相容的 WordPress 版本 **7.1.1**
 *  PHP 版本需求 ** 8.0 或更新版本 **
 *  語言
 * [English (US)](https://wordpress.org/plugins/authlatch/)
 * 標籤:
 * [magic link](https://tw.wordpress.org/plugins/tags/magic-link/)[passkey](https://tw.wordpress.org/plugins/tags/passkey/)
   [passwordless login](https://tw.wordpress.org/plugins/tags/passwordless-login/)
   [smtp](https://tw.wordpress.org/plugins/tags/smtp/)[webauthn](https://tw.wordpress.org/plugins/tags/webauthn/)
 *  [進階檢視](https://tw.wordpress.org/plugins/authlatch/advanced/)

## 評分

這個項目尚無任何評論記錄。

[撰寫評分](https://wordpress.org/support/plugin/authlatch/reviews/#new-post)

[查看全部使用者評論](https://wordpress.org/support/plugin/authlatch/reviews/)

## 參與者

 *   [ Rayhan Sardar ](https://profiles.wordpress.org/madc0de/)

## 技術支援

使用者可在技術支援論壇提出意見反應或使用問題。

 [檢視技術支援論壇](https://wordpress.org/support/plugin/authlatch/)