JWT Authentication for WP REST API

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 54% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ hozayrayz

   6mo ago

   I currently have the free version, and it’s great and simple to use. I never had an issue with it.

   Read on wp.org ↗
2. ★★★★★ dorf

   7mo ago

   they make it confusing and confounding on purpose

   Read on wp.org ↗
3. ★★★★★ xmtek

   11mo ago

   The support guy is not a non-techie, so the support was actually helpful! The plugin works great and let me really extend the user system of my WP so it can act in a auth/auth capacity for the services behind it.

   Read on wp.org ↗
4. ★★★★★ Bizberg Themes

   1.3y ago

   Upgrade message cannot be removed from my site. This topic was modified 1 year, 2 months ago by Bizberg Themes.

   Read on wp.org ↗
5. ★★★★★ vaibhavk326

   1.3y ago

   Hi, actually I am trying to generate token at my login time using an wp_login hook but i am unable to do so, can you provide me any way to do it. Tell me whether there is any buildin function is there that I can use. add_action(‘wp_login’, function ($user_login, $user) {if (!user_can($user, ‘dokandar’)) {return;} $response = wp_remote_post(site_url('/wp-json/jwt-auth/v1/token'), [ 'body' => [ 'username' => $user_login, 'password' => 'YOUR_DEFAULT_PASSWORD_IF_AVAILABLE', // Not ideal, see note below ], ]); if (is_wp_error($response)) { error_log('Token request failed: ' . $response->get_error_message()); return; } $body = json_decode(wp_remote_retrieve_body($response), true); if (!empty($body['token'])) { update_user_meta($user->ID, 'vendor_jwt_token_key', $body['token']); } else { error_log('JWT token missing: ' . json_encode($body)); } }, 10, 2); I am using this thing but thing is password can’t be accessed directly in wordpress.

   Read on wp.org ↗
6. ★★★★★ Mwale Kalenga

   1.3y ago

   I’ve been using the plugin for over year, it’s very good and user friendly! At some point there was a constant message to upgrade, but that was fixed. This topic was modified 1 year, 2 months ago by Mwale Kalenga.

   Read on wp.org ↗
7. ★★★★★ Lucas K

   1.4y ago

   Unfortunately, this plugin is (April 2025) behind a paywall. This should be removed from the plugin directory!

   Read on wp.org ↗
8. ★★★★★ kklo

   1.9y ago

   Hi, I use the Traveler Theme. I installed it according to the instructions, but I always get a connection error: Status Code Error: 401 when connecting with make (integromat)base url: ./domain.com/wp-json/API Key: copied from wp-config.phpHow do I fix this? Thanks

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.5.0 Security: Updated dependencies to latest secure versions (deep-copy, php-parser, phpunit) Feature: Smart upgrade prompts that appear based on actual plugin usage rather than immediately after installation Feature: Usage- 1.5.0
2. — Version 1.4.1 Enhancement: Updated lucide-react from 0.294.0 to 0.541.0 – Latest icon library improvements with new icons and performance optimizations Enhancement: Updated tailwind-merge from 2.6.0 to 3.3.1 – Enhanced CSS utility mer 1.4.1
3. — Version 1.4.0 Feature: Live API Explorer – Interactive tool to test JWT endpoints directly from admin dashboard with real API calls Feature: Enhanced Configuration Dashboard – Real-time monitoring of system health and setup requiremen 1.4.0
4. — Version 1.3.8 Fix upsell notice bug, now it is show only one time 1.3.8
5. — Version 1.3.7 Added PRO announcement 1.3.7
6. — Version 1.3.6 Added Safeguard in enqueue_plugin_assets to Handle Null or Empty $suffix 1.3.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-05-02 50K+ → 60K+ up after 566 days in tier
2. 2023-10-14 40K+ → 50K+ up after 162 days in tier
3. 2023-05-05 50K+ → 40K+ down after 55 days in tier
4. 2023-03-11 40K+ → 50K+ up after 84 days in tier
5. 2022-12-17 50K+ → 40K+ down after 20 days in tier
6. 2022-11-27 60K+ → 50K+ down after 18 days in tier
7. 2022-11-09 70K+ → 60K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• User Data Fields For JWT Authentication 40+ installs · 4.1★ · 3 shared tags D
• GS JWT Authentication for WP REST API 10+ installs · 3.6★ · 3 shared tags D
• W WP REST API – Pure Taxonomies 400+ installs · 4.2★ · 2 shared tags D
• A API Bearer Auth 300+ installs · 4.3★ · 2 shared tags B
• CoCart JWT Authentication 200+ installs · 3.6★ · 2 shared tags B
• S SearchWP API 100+ installs · 4.2★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for JWT Authentication for WP REST API into a readme, a review or a deck. It updates itself.

JWT Authentication for WP REST API: 60K+ active installs, 4.4★ (53 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/jwt-authentication-for-wp-rest-api