by miniOrange
4.4 (72 reviews)
JWT Authentication for WP API
Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2, or external token.
Compatible with WP 6.9
v4.2.0
Current Version v4.2.0
Updated 1 week ago
Last Update on 13 Jan, 2026
Synced 8 hours ago
Last Synced on
Rank
#1,344
-1 this week
Active Installs
20K+
-18.8%
KW Avg Position
53.4
+0.2 better
Downloads
472.1K
+266 today
Support Resolved
0%
—
No change
Rating
88%
Review 4.4 out of 5
4.4
(72 reviews)
Next Milestone 30K
20K+
30K+
207
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5,719 more installs to reach 30K+
Rank Changes
Current
#1,344
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.4
72 reviews
Overall
88%
5
60
(83%)
4
0
(0%)
3
2
(3%)
2
1
(1%)
1
9
(13%)
Tracked Keywords
Showing 5 of 5| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| jwt authentication | 3 | — | Tag | 10 hours ago |
| secure api | 37 | — | Tag | 10 hours ago |
| rest-api | 61 | — | Tag | 10 hours ago |
| API key | 79 | — | Tag | 10 hours ago |
| rest | 87 | — | Tag | 10 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 4.2.0
- Last Updated
- Jan 13, 2026
- Requires WP
- 3.0.1+
- Tested Up To
- 6.9
- PHP Version
- 5.6 or higher
- Author
- miniOrange
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.4
- Reviews
- 72
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,736
Master Addons For Elementor - White Label, Free Widgets, Hover Effects, Conditions, & Animations
40K+ installs
#929
Anti-Malware Security and Brute-Force Firewall
100K+ installs
#295
WPS Limit Login
100K+ installs
#309
reCaptcha by BestWebSoft
100K+ installs
#316
Frequently Asked Questions
Common questions about JWT Authentication for WP API
JWT Authentication for WP API plugin prevents unauthorized access to your WordPress APIs. It reduces potential attack by securing the WP APIs.
This plugin supports 5 methods: i) JWT Token based authentication, ii) authentication through user credentials passed as an encrypted token, iii) API Key authentication, iv) OAuth 2.0 Authentication protocol and v) authentication via JWT token obtained from the external OAuth/OpenId providers which include Google, Facebook, Azure, AWS Cognito, Apple etc and also from Firebase.
You just have to select your WP REST API Authentication Method in the plugin. Based on the method you have selected, you will get the authorization code/token after sending the token request. Access your REST API with the code/token you received in the previous step.
Yes, the plugin provides Basic authentication with the following 2 methods - a.) WP Username & Password b.) Client Credentials. The plugin provides you with more security for Basic auth token validation using a highly secure HMAC algorithm.
Yes, the plugin supports the authentication for custom-built REST endpoints and Third-Party plugin APIs.
Yes, this plugin by default disables all the WP REST APIs, which can only be accessed with allowed authentication and authorization, but it provides a feature where you can choose which particular endpoints you want to disable and which ones to make accessible publicly.
This plugin provides this HTTP POST endpoint wp-json/api/v1/token, also called as WordPress login API endpoint, in which you can pass the user's WordPress credentials and this endpoint will validate the user and return you with the appropriate response. The plugin also supports the WP REST API authentication and authorization of WordPress users' register API.
This plugin provides you with an WP REST API Authentication method called the 'Third Party Provider' authentication method, in which the JWT token or access token is obtained from external identities(OAuth/OIDC/JWT/JWKS providers) like Firebase, Okta, Azure, Keycloak, ADFS, AWS Cognito, Google, Facebook, Apple, etc., can be passed along with API request in the header, and the plugin validates that JWT / access token directly from these external sources/providers.
This plugin provides a way to bypass Woocommerce security and instead authenticate APIs using the authentication methods, hence improving the security and preventing Woocommerce credentials from getting compromised. The authentication token passed in the API request will validate the user and result in user-specific data only. For more information, please contact us at apisupport@xecurify.com
To achieve the auto-login and session sharing, we have another plugin WordPress Login & Register using JWT