Capsquery Facial Authentication

Capsquery Facial Authentication adds a Login with Face button to wp-login.php and a [capsquery_facial_authentication] shortcode for front-end pages.

How it works

1. A user can enrolls their face from Users → Profile.
2. They set a 4–8 digit PIN as a second factor.
3. At login, the browser captures the face locally using face-api.js.
4. An encrypted face descriptor is matched on the server.
5. The user confirms their identity and enters their PIN.

• Face descriptors encrypted at rest (AES-256-GCM)
• PIN stored as a secure hash
• Rate limiting and brute-force protection
• GDPR export/erase support

Third-party library

Face detection and recognition run entirely in the visitor’s browser using face-api.js (MIT license), bundled under assets/vendor/. Its pretrained model weights are required for the plugin to function and are bundled under assets/models/. Since the raw weight files have no meaningful file extension, each one is stored base64-encoded inside a small .json wrapper file and decoded on request by a plugin REST endpoint — no external network calls or third-party servers are involved.

Requirements

• HTTPS (or localhost for development) — browsers require a secure context for camera access
• PHP OpenSSL extension
• A webcam on the client device

Support

Need help or have questions?

Website: https://capsquery.com/
Email: arijit.paul@capsquery.com