LocoAI
89LocoAI - Auto Translate For Loco Translate is a powerful tool for developers looking to quickly translate thei...
Free
70k+ installs 4.9★ (637)
JWT Authentication for WP REST API
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
The facts
- Rating
- 4.4★ from 53
- Active installs
- 60k+
- Price
- Free
- Last updated
- 18 Feb 2026
- Added
- Sep 2015
- Requires WP
- 4.2
- Tested up to
- WP 6.9.7
- Requires PHP
- 7.4.0
- Downloads
- 942,616
Our analysis
AI-assistedJWT Authentication for WP REST API is a WordPress plugin that enhances the WP REST API by enabling secure authentication through JSON Web Tokens (JWT). It provides a straightforward method for users to authenticate via the REST API, returning a JWT upon successful login.
The plugin includes standard JWT authentication, simple endpoints for token generation and validation, and configurable secret keys. It is suitable for developers looking to implement secure authentication in their applications using the WP REST API.
Best for: Developers needing secure authentication for applications using the WP REST API.
What it does well
- ✓Implements standard JWT authentication
- ✓Offers clear endpoints for token management
- ✓Allows configurable secret key for security
- ✓Includes optional CORS support
- ✓Provides developer hooks for customization
Where it falls short
- •Requires WP REST API v2 to function
- •Advanced features available only in the PRO version
- •Caveat regarding HTTP Authorization Header setup
Verdict
This plugin offers essential JWT authentication features for WordPress developers, but those needing advanced capabilities may need to consider the PRO version.
From the developer
tmeister's own description of JWT Authentication for WP REST API, lightly tidied.
This plugin seamlessly extends the WP REST API, enabling robust and secure authentication using JSON Web Tokens (JWT). It provides a straightforward way to authenticate users via the REST API, returning a standard JWT upon successful login.
Key features of this free version include:
- Standard JWT Authentication: Implements the industry-standard RFC 7519 for secure claims representation.
- Simple Endpoints: Offers clear
/tokenand/token/validateendpoints for generating and validating tokens. - Configurable Secret Key: Define your unique secret key via
wp-config.phpfor secure token signing. - Optional CORS Support: Easily enable Cross-Origin Resource Sharing support via a
wp-config.phpconstant. - Developer Hooks: Provides filters (
jwt_auth_expire,jwt_auth_token_before_sign, etc.) for customizing token behavior.
JSON Web Tokens are an open, industry standard method for representing claims securely between two parties.
For users requiring more advanced capabilities such as multiple signing algorithms (RS256, ES256), token refresh/revocation, UI-based configuration, or priority support, consider checking out JWT Authentication PRO.
Support and Requests: Please use GitHub Issues. For priority support, consider upgrading to PRO.
Requirements
Wp REST API v2
This plugin was conceived to extend the WP REST API V2 plugin features and, of course, was built on top of it.
So, to use the wp-api-jwt-auth you need to install and activate WP REST API.
PHP
Minimum PHP version: 7.4.0
PHP HTTP Authorization Header Enable
Most shared hosting providers have disabled the HTTP Authorization Header by default.
To enable this option you’ll need to edit your .htaccess file by adding the following:
RewriteEngine on
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1]
Tagged as
Alternatives
Other plugins for integrating services.
The AI + Automation plugin for WordPress. Automate workflows across all your plugins and apps, add an AI agent...
Free
40k+ installs 4.9★ (156)
Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submiss...
Free
10k+ installs 5★ (67)
Activity Log
87Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audi...
Free
200k+ installs 4.3★ (74)
Reviews Feed
87No API key required. Display Yelp and Google reviews for any business in a clean, customizable feed on your si...
Free
100k+ installs 4.4★ (34)
Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect...
Free
20k+ installs 4.9★ (160)