Title: Capsquery Facial Authentication
Author: arijit1992
Published: <strong>July 15, 2026</strong>
Last modified: July 15, 2026

---

Search plugins

![](https://ps.w.org/capsquery-facial-authentication/assets/banner-772x250.png?rev
=3609117)

![](https://ps.w.org/capsquery-facial-authentication/assets/icon-256x256.png?rev
=3609117)

# Capsquery Facial Authentication

 By [arijit1992](https://profiles.wordpress.org/arijit1992/)

[Download](https://downloads.wordpress.org/plugin/capsquery-facial-authentication.1.1.2.zip)

 * [Details](https://wordpress.org/plugins/capsquery-facial-authentication/#description)
 * [Reviews](https://wordpress.org/plugins/capsquery-facial-authentication/#reviews)
 *  [Installation](https://wordpress.org/plugins/capsquery-facial-authentication/#installation)
 * [Development](https://wordpress.org/plugins/capsquery-facial-authentication/#developers)

 [Support](https://wordpress.org/support/plugin/capsquery-facial-authentication/)

## Description

Capsquery Facial Authentication adds a **Login with Face** button to wp-login.php
and a `[capsquery_facial_authentication]` shortcode for front-end pages.

**How it works**

 1. A user can enrolls their face from **Users  Profile**.
 2. They set a 4–8 digit PIN as a second factor.
 3. At login, the browser captures the face locally using face-api.js.
 4. An encrypted face descriptor is matched on the server.
 5. The user confirms their identity and enters their PIN.

 * Face descriptors encrypted at rest (AES-256-GCM)
 * PIN stored as a secure hash
 * Rate limiting and brute-force protection
 * GDPR export/erase support

**Third-party library**

Face detection and recognition run entirely in the visitor’s browser using [face-api.js](https://github.com/justadudewhohacks/face-api.js)(
MIT license), bundled under `assets/vendor/`. Its pretrained model weights are required
for the plugin to function and are bundled under `assets/models/`. Since the raw
weight files have no meaningful file extension, each one is stored base64-encoded
inside a small `.json` wrapper file and decoded on request by a plugin REST endpoint—
no external network calls or third-party servers are involved.

#### Requirements

 * HTTPS (or localhost for development) — browsers require a secure context for 
   camera access
 * PHP OpenSSL extension
 * A webcam on the client device

### Support

Need help or have questions?

Website: https://capsquery.com/
 Email: arijit.paul@capsquery.com

## Screenshots

[⌊Login page with Face Authentication enabled.⌉⌊Login page with Face Authentication
enabled.⌉[

Login page with Face Authentication enabled.

[⌊User Face Enrollment screen.⌉⌊User Face Enrollment screen.⌉[

User Face Enrollment screen.

[⌊PIN verification after successful face recognition.⌉⌊PIN verification after successful
face recognition.⌉[

PIN verification after successful face recognition.

[⌊Plugin Settings page.⌉⌊Plugin Settings page.⌉[

Plugin Settings page.

[⌊Successful facial authentication login.⌉⌊Successful facial authentication login
.⌉[

Successful facial authentication login.

[⌊Unlock with pin page.⌉⌊Unlock with pin page.⌉[

Unlock with pin page.

## Installation

 1. Upload the plugin folder to `/wp-content/plugins/capsquery-facial-authentication/`
    or install via **Plugins  Add New**.
 2. Activate the plugin.
 3. Go to **Settings  Facial Authentication** and confirm Facial Authentication is 
    enabled.
 4. As a user, open **Users  Profile**, enroll your face, and set a PIN.
 5. Visit wp-login.php and click **Login with Face**.

## FAQ

### Who can use Capsquery Facial Authentication in the free version?

On a single site, this is typically users with the any role.

### Are photos stored on the server?

No. The plugin stores an encrypted mathematical face descriptor (128 numbers), not
an image.

### Is face matching alone enough to log in?

No. A successful face match must be followed by the correct PIN.

### Does it work without HTTPS?

No. Modern browsers block camera access except on HTTPS or localhost.

### How do I add Facial Authentication to a page?

Use the shortcode: `[capsquery_facial_authentication]` or `[capsquery_facial_authentication
redirect="/my-account"]`

### What are the .json files under assets/models?

They are the pretrained face-api.js (MIT-licensed) neural network weights needed
for on-device face detection and recognition. The library’s raw weight files have
no standard file extension, so each one is base64-encoded and wrapped in a `.json`
file; the plugin decodes and streams it back out through its own REST endpoint when
the browser loads the model. They are required — the plugin cannot detect or recognize
faces without them.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Capsquery Facial Authentication” is open source software. The following people 
have contributed to this plugin.

Contributors

 *   [ arijit1992 ](https://profiles.wordpress.org/arijit1992/)

[Translate “Capsquery Facial Authentication” into your language.](https://translate.wordpress.org/projects/wp-plugins/capsquery-facial-authentication)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/capsquery-facial-authentication/),
check out the [SVN repository](https://plugins.svn.wordpress.org/capsquery-facial-authentication/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/capsquery-facial-authentication/)
by [RSS](https://plugins.trac.wordpress.org/log/capsquery-facial-authentication/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.1.0

 * Admin settings page (enable/disable, match sensitivity)
 * Security fixes: removed user_id override, improved REST validation, proper rate-
   limit responses
 * Privacy/GDPR export and erasure support
 * uninstall.php for clean removal
 * Conditional shortcode asset loading

#### 1.1.1

 * Security improvements

=1.1.2=
 * Fixed issues reported during WordPress.org plugin review. * Code cleanup
and compliance improvements.

## Meta

 *  Version **1.1.2**
 *  Last updated **13 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0.1**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [authentication](https://wordpress.org/plugins/tags/authentication/)[biometric](https://wordpress.org/plugins/tags/biometric/)
   [login](https://wordpress.org/plugins/tags/login/)[security](https://wordpress.org/plugins/tags/security/)
 *  [Advanced View](https://wordpress.org/plugins/capsquery-facial-authentication/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/capsquery-facial-authentication/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/capsquery-facial-authentication/reviews/)

## Contributors

 *   [ arijit1992 ](https://profiles.wordpress.org/arijit1992/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/capsquery-facial-authentication/)