by lynn999 4.6 (11 reviews)

EthPress - Web3 Login

Name: EthPress - Web3 Login
Rating: 4.6 (11 reviews)
Author: lynn999

EthPress Web3 Login Wordpress Plugin adds the capability to connect with cryptocurrency wallets such as MetaMask or Reown QR code.

EthPress ranks #16,655 among WordPress.org plugins with 100+ active installations, is #332 of 1,659 in the Authentication category, a 4.6/5 rating from 11 reviews, and was last updated Oct 21, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v3.0.0 Current Version v3.0.0

Updated 2 weeks ago Last Update on 21 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#332 of 1,659 in Authentication Top 25% by installs Downloads +63.4% this week Actively maintained

View on WordPress.org

Rank

#16,655

— No change

Active Installs

100+

-11.5%

KW Avg Position

— No change

Downloads

36.4K

+7 today

Support Resolved

— No change

Rating

92%

Review 4.6 out of 5

4.6 (11 reviews)

Next Milestone 200

Total Progress 8%

100+ 200+

3,981

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 92 more installs to reach 200+

Rank Changes

Current #16,655

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.6

11 reviews

Overall 92%

10 (91%)

0 (0%)

1 (9%)

Security History

Source: WPVulnerability

5 known vulnerabilities on record · 0 in the last 24 months · checked 3 months ago

Oct 16, 2024

EthPress – Web3 Login [ethpress] < 1.5.1

CVE-2022-4974 · Fixed in v1.5.1
Jul 18, 2023

EthPress – Web3 Login [ethpress] < 2.1.1

CVE-2023-33999 · Fixed in v2.1.1
Mar 4, 2022

EthPress – Web3 Login [ethpress] < 1.5.1

Fixed in v1.5.1
Feb 28, 2022

EthPress – Web3 Login [ethpress] < 1.5.1

Fixed in v1.5.1
Feb 28, 2022

EthPress – Web3 Login [ethpress] < 1.5.1

Fixed in v1.5.1

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 3.0.0
Last Updated: Oct 21, 2026
Requires WP: 6.0+
Tested Up To: 7.1
PHP Version: 8.1 or higher
Author: lynn999

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.6
Reviews: 11
Support Threads: 0
Resolved: 0%

Keywords

cryptocurrency ethereum metamask nft walletconnect

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

All-In-One Security (AIOS) – Security and Firewall

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites

700K+ installs

#86

View all Authentication plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to let users log in using cryptocurrency wallets like MetaMask or WalletConnect. It solves the problem of adding secure, wallet-based authentication to WordPress while automatically creating regular WordPress user accounts behind the scenes.

Login with MetaMask wallet
Login with WalletConnect QR code
Web3 login button on login screen
EthPress login widget
[ethpress_login_button] shortcode
[ethpress_link_button] shortcode
Local signature verification
Ultimate Member plugin integration

Frequently Asked Questions

Common questions about EthPress - Web3 Login

The NFT Token based access control for the WooCommerce products, simple pages and posts can be done with the EthPress NFT Access Add-On. Free 7 days Trial is available! The modal classes keep changing The wallet modal is drawn by Reown AppKit inside a shadow root, so page CSS and class selectors cannot reach it at all (the old #web3-login-root element and its per-build svelte-* classes are gone). Style it with the Custom CSS setting (PRO, in Reown Settings) and the AppKit CSS variables such as --w3m-accent.

The outline is described in this TopTal post by Amaury Martiny. A one-time nonce is stored for the wallet address and consumed when the signature is verified, so a signed message cannot be replayed. Its lifetime is 15 minutes by default and can be changed with the ethpress_nonce_lifetime filter. The IP the message was requested from is stored with it for troubleshooting, but it is not part of the check, because a mobile wallet can switch networks between requesting the message and signing it. For more details, check out the extra readme. Signature verification

Read the "How does it work?" question. Firstly, if you have the php-gmp or php-bcmath extension installed, we do it with PHP, and you can ignore the rest of this. The Diagnostics section of the EthPress settings page proves it with a known message and signature. Otherwise the verification is done by a verification service. EthPress PRO comes configured with a Managed Verification Service. You can also host that service yourself and set its URL in the Verification Service API URL setting; its source code is here: https://gitlab.com/losnappas/verify-eth-signature.

Yes. A wallet (e.g. MetaMask) does/should not leak your private keys out into the wild, that would be madness.

Mobile integration is in good condition, with Reown QR code reading from wallets such as MetaMask Mobile, there is very little friction!

Unlinking is a soft detach: only the association is removed, the WordPress account stays. The ethpress user meta of the account is deleted, so the wallet no longer resolves to it: [ethpress_account], the eth-address-field elements and the unlink button show nothing until a wallet is linked again. A user who signed in with the wallet as their login name is logged out, because the wallet was their only way in. A regular WordPress user (who linked a wallet to an existing account) stays logged in. The account itself is not deleted, and neither is its login name. For wallet users the login name is the wallet address, so signing in again with the same wallet finds that account through it and links the address back to it. This is why a freshly unlinked wallet does not get a second account, and why an unlinked wallet cannot be used to register a new one. Unlinking from the account page and then signing in with the same wallet therefore ends up in the same account, with the wallet linked again. To dissociate them for good, delete the WordPress user as well (Users > All Users). Deleting a user removes their wallet address with them.

This is everything EthPress keeps on your server for a wallet: the wallet address, as the ethpress user meta of the WordPress user the wallet is linked to. Unlinking the wallet deletes that meta; the user account itself and its login name (the address) stay until the account is deleted; the WordPress user account itself: its login name and its display name are the wallet address, and its email is a placeholder derived from that address - unless the visitor typed a real email and name, which the registration form, the WooCommerce checkout or the Inline form next to the login button mode collect; two flags on that user, ethpress_generated_email and ethpress_profile_incomplete, which let the plugin replace the placeholder email with a real one; the one-time login nonce: a transient keyed by the wallet address that also records the IP the login message was requested from. The IP is kept for troubleshooting only and is never checked. The nonce is deleted as soon as the signature is verified, and expires after 15 minutes at the latest; debugging lines, when the plugin writes them (a failed verification, or any login verified by the service). They go to the WooCommerce log file, wp-content/uploads/wc-logs/ethpress-*.log, or to the PHP error log when WooCommerce is not installed, and they contain the wallet address, the message that was signed and its signature. Clear those files when the addresses have to be gone. Nothing is sent anywhere, with two exceptions: the verification service, when it is the one verifying the signatures on your site (see the "Signature verification" question). Only the message and the signature are posted; the wallet address is recovered from the signature there, not sent. The default (managed) service is hosted on ethereumico.io and stores nothing, and you can host that service yourself instead. opening the wallet modal talks to Reown: its API provides the wallet list, and mobile wallets are connected through the WalletConnect relay. EthPress itself sends neither the signature nor the wallet address there. Deleting a user deletes their wallet address with them. Removing the plugin deletes the plugin settings, but the wallet addresses stay in wp_usermeta until those users are deleted themselves - search for the ethpress meta key if you need to remove them by hand. Check the Diagnostics section of the EthPress settings page to see which verification path your site uses. Source code and contributing Contributions on GitLab only, thank you. Plugin's source code: https://gitlab.com/losnappas/ethpress. Signature verifier's, which is used if no php-gmp or php-bcmath, source code: https://gitlab.com/losnappas/verify-eth-signature. The wallet modal is a React component built on the Reown AppKit library. Its source code is part of the plugin repository, in the reown/ directory: https://gitlab.com/losnappas/ethpress. Further support On the wordpress.org support page, or on the ethereumico.io support forum.