manifest / security / unveilpass-wordpress

UnveilPass

UnveilPass plugin for WordPress — SSO, Agent Gateway, 2FA enforcement

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/unveiltech/unveilpass-wordpress/archive/refs/heads/main.zip

No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Zero-knowledge password manager integration for WordPress.

Password Generator — Dashboard widget with length, character toggles and strength indicator (12 chars max)
Admin Bar Button — Quick password generation from anywhere in WordPress admin
REST API — GET /wp-json/unveilpass/v1/generate?length=12

Sign in with UnveilPass — OIDC SSO button on wp-login.php with PKCE (S256)
Auto-create users — optionally create WordPress accounts for new UnveilPass users
2FA enforcement — block direct password login for administrators
Agent Gateway — unveilpass_get_credential($entry_id) helper for deployment scripts
Security dashboard — admin/editor login history and method tracking
Extended generator — up to 128 characters

No configuration needed. The password generator widget appears on your dashboard automatically.

Log in to UnveilPass
Go to Manager Console > Applications
Click + New Application
Set the Redirect URI to: https://yoursite.com/wp-login.php?unveilpass_callback=1
Copy the Client ID and Client Secret to the plugin settings

$cred = unveilpass_get_credential('your-entry-uuid');
if ($cred) {
    $db_user = $cred['username'];
    $db_pass = $cred['password'];
}