JWT Auth – WordPress JSON Web Token Authentication

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 61% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ maidot

   2.6y ago

   Tried other plugins, had problems with them and this one simply works and that’s it. This is a properly developed plugin. Keep it up!

   Read on wp.org ↗
2. ★★★★★ gunberi

   3.0y ago

   The simplest and most useful plugin

   Read on wp.org ↗
3. ★★★★★ Gagan

   3.1y ago

   Works perfect. Thank You!

   Read on wp.org ↗
4. ★★★★★ bilskirnir

   3.2y ago

   Exactly what I was looking for

   Read on wp.org ↗
5. ★★★★★ Julian Lang

   3.2y ago

   works perfect, a lot of useful filters, no advertising or brand prefixes. you can transform your wp to a nice headless backend with this

   Read on wp.org ↗
6. ★★★★★ kheftel

   4.4y ago

   allows me to use JWT authentication with WP REST API on wordpress 5.9.3, with one tweak for a host that strips authentication headers (not the plugin’s fault)

   Read on wp.org ↗
7. ★★★★★ Ahmed Hnewa

   5.6y ago

   good plugin , but please stay this plugin updated it help me for make authentication on my androis app with wordpress as backend thank you

   Read on wp.org ↗
8. ★★★★★ dovich

   5.7y ago

   Thank You for this fork from old plugin that not supported for a long time. Amazing.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.0.2 Fix: Do not revalidate authentication headers if a valid user was determined already. (#75) Fix: Added debugging timeframe before purging refresh tokens. (#93) Fix: Fixed unnecessary user account lookup for device listin 3.0.2
2. — Version 3.0.1 Updated firebase/php-jwt to 6.3 to address security issue in versions prior to 6.x. 3.0.1
3. — Version 3.0.0 New feature: Added support for refresh tokens. New feature: Added automated end-to-end tests using PHPUnit. Breaking change: Reduced default access token lifetime to 10 minutes. Breaking bugfix: All authentication error 3.0.0
4. — Version 2.1.6 Added automated asset updates from GitHub. 2.1.6
5. — Version 2.1.5 Removed dev and build files from distribution. 2.1.5
6. — Version 2.1.4 Added update warning and information relevant to updating to version 3. 2.1.4

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

1. Critical · 9.1 Firebase PHP-JWT < 6.0.0 - Algorithm Confusion ↗
   2022-11-11 CVE-2021-46743 Access of Resource Using Incompatible Type ('Type Confusion') Affects <= 2.1.0 Patched in 2.1.1

Automated install-time checks, tested on PHP 8.1.12 · WP 6.5.3

Translated into 6 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-12-20 7K+ → 6K+ down after 100 days in tier
2. 2024-09-11 6K+ → 7K+ up after 1 days in tier
3. 2024-09-10 7K+ → 6K+ down after 5 days in tier
4. 2024-09-05 6K+ → 7K+ up after 256 days in tier
5. 2023-12-24 5K+ → 6K+ up after 99 days in tier
6. 2023-09-16 6K+ → 5K+ down after 11 days in tier
7. 2023-09-05 5K+ → 6K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Login and Register using JWT 100+ installs · 4.2★ · 2 shared tags A
• Simple REST API Authenticaton with WooCommerce Credentials 60+ installs · 4.0★ · 2 shared tags B
• JWT Authentication for WP REST API 60K+ installs · 4.3★ · 1 shared tag B
• Simple JWT Login – Allows you to use JWT on REST endpoints. 4K+ installs · 4.8★ · 1 shared tag A
• Firebase Authentication 400+ installs · 4.0★ · 1 shared tag B
• A API Bearer Auth 300+ installs · 4.3★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for JWT Auth – WordPress JSON Web Token Authentication into a readme, a review or a deck. It updates itself.

JWT Auth – WordPress JSON Web Token Authentication: 6K+ active installs, 5.0★ (22 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/jwt-auth