CS BioLogin – Seamless Biometric Authentication

FAQ

Does this store my fingerprint or face on the server?

No. WebAuthn keeps biometrics on the device. The site only stores a public key used to verify future logins.

Does the plugin call external services?

No. Challenges, verification, and credential storage all run on your WordPress installation. JavaScript and CSS are bundled with the plugin (no third-party CDNs).

Is HTTPS required?

Yes, for production sites. The plugin shows an admin notice if HTTPS is missing (localhost and .local hosts are exempt for development).

Can users still log in with a password?

Yes, unless the administrator enables Force Biometric Login, which blocks password sign-in for any account that already has a registered passkey. Accounts without one yet can still use their password until they set one up.

Is WooCommerce supported?

Yes. Device management appears under My Account, and biometric login can appear on WooCommerce login forms when enabled.

Password managers block the biometric prompt. What should I do?

Extensions such as 1Password, Bitwarden, or LastPass may intercept passkey prompts. Enable passkey support in the manager or disable autofill for your site so the native OS dialog (Touch ID, Face ID, Windows Hello) can appear.

Can administrators manage user devices?

Yes. Use Biometric Login → User Management to reset devices, view logs, and register passkeys on behalf of users (with appropriate capability checks). To remove every registered device for every user in one action, use the “Reset All Devices for All Users” button in the Security Settings tab’s Danger Zone: it requires typing a confirmation phrase and is logged to the Security Logs.

What shortcodes does this plugin provide?

[csbisebi_device_manager]: Renders the full “Manage Biometric Devices” panel: registered device list, add/rename/remove controls, and a registration form. Only visible to logged-in users; logged-out visitors see a “Please log in” notice instead. The plugin auto-creates a page containing this shortcode on activation.

[csbisebi_login_button]: Renders only a “Login with Biometrics” trigger button, safe to place inside a normal page, a widget, or a page-builder popup (e.g. Elementor). It prints nothing at all for a visitor who is already logged in. What happens on click is controlled by Biometric Login → Implementation → Popup Behavior:

• Show the sign-in popup (default): opens a popup with the biometric prompt plus optional password/register buttons.
• Authenticate directly: skips the popup and triggers the biometric prompt immediately.

What filter hooks does this plugin provide for developers?

All filters below can be added to your theme’s functions.php or a site-specific plugin.

csbisebi_button_text: Change the biometric login button’s text everywhere it appears (login screen, [csbisebi_login_button] shortcode, WooCommerce account button), overriding the “Button Text” UI setting.

add_filter( 'csbisebi_button_text', function ( $text ) {
    return 'Sign in with Face ID';
} );

csbisebi_popup_header_icon: Replace the fingerprint icon shown in the sign-in popup’s header. Return raw HTML/SVG markup; return an empty string (the default) to keep the built-in, theme-colored fingerprint icon.

add_filter( 'csbisebi_popup_header_icon', function ( $icon_html ) {
    return '<img src="https://example.com/my-icon.svg" width="32" height="32" alt="" />';
} );

csbisebi_popup_heading_title: Change the heading title in the sign-in popup’s header (defaults to the site name).

add_filter( 'csbisebi_popup_heading_title', function ( $title ) {
    return 'Welcome back!';
} );

csbisebi_popup_guest_notice: Change the helper text shown under the popup header about guest/private browsing windows.

add_filter( 'csbisebi_popup_guest_notice', function ( $text ) {
    return 'Using a private window? You may need your phone or a security key instead.';
} );

csbisebi_popup_footer_text: Change the privacy note shown at the bottom of the sign-in popup (next to the green checkmark icon).

add_filter( 'csbisebi_popup_footer_text', function ( $text ) {
    return 'Your biometric data stays on your device.';
} );

csbisebi_force_biometric_enabled: Override whether “Force Biometric Login” is enforced, independent of the saved setting. Return false to force it off (e.g. from a must-use plugin or an emergency break-glass hook) without touching the database.

add_filter( 'csbisebi_force_biometric_enabled', function ( $enabled ) {
    return false;
} );

csbisebi_plugin_name: Change the plugin’s display name shown in menus, headings, and the WooCommerce account tab.

add_filter( 'csbisebi_plugin_name', function ( $name ) {
    return 'ABCD Passkey Login';
} );