Easy Secure Login – Google One Tap & Sign-In
Easy Secure Login enhances your site’s security by integrating two powerful Google authentication methods: Google Sign-In and Google One Tap. It can optionally replace the standard WordPress password system entirely…
Use with caution
Easy Secure Login works, but test it on a staging site before relying on it in 2026. It runs on 40+ sites, is rated 5/5 and was last updated 2 months ago, and scores 54/100 on our health check.
- Small user base (40+ active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Easy Secure Login stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| Google Login | >100 |
| google one tap | #14 |
| google sign in | #76 |
| login redirect | >100 |
| passwordless | #76 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 5 from 1 reviews
About Easy Secure Login
From the official readme · v2.2.6Description
Easy Secure Login enhances your site’s security by integrating two powerful Google authentication methods: Google Sign-In and Google One Tap. It can optionally replace the standard WordPress password system entirely, offering a modern, passwordless login experience.
Born out of necessity after a real-world brute-force attack, this plugin was designed with the option to enforce a Google-only login policy. When that policy is enabled, Google authentication is restricted to verified accounts allowed by your user settings. It combines layered, Google-powered authentication safeguards with a modern interface, automatic user management, and a step-by-step setup wizard.
Key Features
- Optional Passwordless Security: Ability to completely disable standard password logins, forcing all users to authenticate via Google’s secure OAuth 2.0.
- Role-Based Redirects: Define custom landing pages for different user roles. Redirect subscribers to your homepage or a custom dashboard while keeping admins in wp-admin.
- Google Sign-In Button: A clean, modern “Continue with Google” button on the default login page or any custom login page through a shortcode.
- WooCommerce and Custom Login Pages: Add
[easy_secure_login]to page content, a shortcode block, or a custom PHP template withecho do_shortcode('[easy_secure_login]');. - Optional One Tap on Custom Pages: Use
[easy_secure_login one_tap="yes"]to show the button and request the Google One Tap prompt on a custom login page. - Google One Tap: Allows logged-in Google users to sign in instantly with a single click via a non-intrusive pop-up.
- Complete User Management: Whitelist specific Google accounts and assign roles, or allow open registration for any Google user.
- Google Profile Picture Sync: Automatically syncs and displays Google profile pictures as user avatars in WordPress.
- Built-in Security Hardening:
- Disable XML-RPC to prevent common attacks.
- Disable the plugin and theme file editor.
- Hide your WordPress version number.
- Restrict REST API access to logged-in users.
- Block direct access to sensitive core files.
- User-Friendly Setup Wizard: A clean, multi-step guide to get your Google Cloud credentials configured in minutes.
- Actively Maintained for the latest WordPress versions.
This plugin strengthens login security while improving the user experience.
External services
This plugin uses Google’s Identity Services to provide a secure authentication method (Google Sign-In and Google One Tap). To function, it connects to several Google APIs.
- Service: Google Identity Services (accounts.google.com)
- Purpose: This service is used to display the “Sign in with Google” button and the Google One Tap prompt. It handles the user authentication process directly in the user’s browser.
- Data Sent: This plugin initiates the authentication flow, but user data (like email and password) is entered directly on Google’s domain, not through this plugin. The plugin only receives a secure authentication token from Google after a successful login.
-
Terms and Policies:
- Google Terms of Service: https://policies.google.com/terms
- Google Privacy Policy: https://policies.google.com/privacy
-
Service: Google OAuth & People APIs (oauth2.googleapis.com, www.googleapis.com)
- Purpose: After a user authenticates, the plugin’s server sends the received authentication token/code to these Google APIs to verify its authenticity and retrieve basic user profile information (email, name, profile picture).
- Data Sent: An authentication token/code provided by Google is sent from your server to Google’s servers for validation.
- Terms and Policies:
- Google APIs Terms of Service: https://developers.google.com/terms
Installation
- Upload the plugin folder to
/wp-content/plugins/or install via Plugins → Add New in WordPress. - Activate the plugin through the Plugins menu.
- Go to Easy Secure Login in the WordPress admin sidebar to launch the setup wizard.
- Follow the setup wizard:
- Create a Google Cloud project and configure OAuth credentials.
- Add the “Authorized redirect URIs” and “Authorized JavaScript origins” provided by the wizard to your Google project.
- Enter your Google Client ID and Client Secret into the plugin settings.
- Configure authorized users or enable public sign-ups with a default role.
- Enable optional Google One Tap on your homepage.
- Review and enable additional security enhancements.
- Test the login flow on your WordPress login page.
Custom Login Pages and WooCommerce
Add the following shortcode in page content or a Shortcode block:
[easy_secure_login]
To place the button in a PHP template, including a custom WooCommerce My Account login template, use:
<?php echo do_shortcode('[easy_secure_login]'); ?>
For example, place that line immediately after wc_get_template('myaccount/form-login-only.php'); in your custom template. The shortcode loads its own Google Sign-In script and styling, and it outputs nothing for users who are already logged in.
To also enable the Google One Tap prompt on that custom page, use:
<?php echo do_shortcode('[easy_secure_login one_tap="yes"]'); ?>
One Tap remains opt-in for shortcode pages, so adding the standard shortcode does not unexpectedly prompt visitors.
Exclude custom login pages containing this shortcode from full-page caches. Authentication state is unique to each browser and must not be served from a shared cached HTML response.
That’s it! Your site is now enhanced with Google’s secure authentication.
Frequently asked questions
Does this completely replace WordPress password login?
You can choose. By default, the plugin adds Google Sign-In as an alternative to the standard password login. For maximum security, you can enable the “Disable Password Login” option in the plugin’s security settings. When enabled, all password-related functionality is disabled, including the login form, password reset, and standard registration forms. This protects you from brute-force and password-guessing attacks.
Can I allow only specific users?
Yes. In the “Users” step of the wizard, you can build a whitelist of authorized Google email addresses and assign a specific WordPress role to each.
What if I want to allow any Google user to register?
You can enable the “Allow New User Sign-Ups” option. Any user who authenticates with a Google account will have an account created for them with your chosen default role (Subscriber is recommended for safety).
How does Google One Tap work?
Google One Tap is automatically enabled on the login page. If a user is already signed into their Google account in their browser, a small pop-up will appear, allowing them to log in to your site with a single click, without ever leaving the page. You can also choose to enable this on your homepage.
What happens to existing WordPress users?
They can log in seamlessly using the Google account that matches their existing WordPress user email address. Their account will be linked automatically.
Is this plugin compatible with other login or security plugins?
Because it can completely replace the core WordPress authentication flow, it may conflict with other plugins that modify the login process (like other social logins, 2FA, or login page customizers) if you enable the “Disable Password Login” option. It is designed to be an all-in-one solution for login security.
Can I show the button on a custom or WooCommerce login page?
Yes. Add [easy_secure_login] to page content or a Shortcode block. In a PHP template, use . This works alongside custom WooCommerce login templates such as wc_get_template('myaccount/form-login-only.php');.
Can I enable Google One Tap on a custom login page?
Yes. Use [easy_secure_login one_tap="yes"] in page content, a Shortcode block, or do_shortcode() in your PHP template. This adds the Continue with Google button and enables the One Tap prompt for logged-out visitors on that page.
How secure is this?
The authentication process is handled by Google’s OAuth 2.0 servers. The plugin validates browser-bound, single-use state tokens, verifies requests server-side with Google, requires verified email addresses, sanitizes submitted data, and escapes rendered data. No software can guarantee complete security, so WordPress, this plugin, themes, and other plugins should always be kept updated.
Should a shortcode login page be cached?
No. Exclude pages containing [easy_secure_login] from full-page caching in caching plugins, CDNs, and reverse proxies. Cached authentication markup can contain expired or browser-specific state and prevent a secure login.
Changelog
2.2.6
- New Feature: Added the
one_tap="yes"shortcode option for enabling Google One Tap on custom and WooCommerce login pages. - Security: Require a matching browser cookie and single-use server state for both OAuth and One Tap callbacks, reject unverified Google email addresses, prevent forged state preparation requests, and enforce non-privileged roles for public registration.
- Compliance: Removed unsolicited public-facing credits and crawlable promotional links in accordance with WordPress.org plugin guidelines.
2.2.5
- New Feature: Added the
[easy_secure_login]shortcode for custom login pages and PHP templates. - Compatibility: Added support for displaying the Google Sign-In button alongside custom WooCommerce My Account login templates.
- Enhancement: Updated frontend asset loading and CSRF state preparation so shortcode-based Google authentication works outside the default WordPress login page.
2.2.4
- Fix: Made the full “Continue with Google” OAuth button flow more reliable when browsers do not return the temporary state cookie after Google’s redirect.
2.2.3
- Fix: Added clearer setup wizard save failure notices when Google OAuth credentials fail validation.
- Fix: Improved setup wizard redirects so failed saves stay on the current step and successful saves advance only after WordPress processes the settings update.
2.2.2
- Fix: Improved setup wizard saves so each step reliably persists the intended settings before continuing.
- Fix: Ensured the Google login page always receives the required CSRF state token before initiating sign-in.
- Compatibility: Tested with WordPress 7.0.
2.2.1
- Fix: Resolved a persistent Google OAuth setup notice showing even when valid credentials were already configured.
- Maintenance: Confirmed removal of development-only
combined_contents.txtfrom distributable plugin files.
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Easy Secure Login alternatives
All Google Login plugins →
FAQ
Easy Secure Login: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 29, 2026
Is Easy Secure Login free?
Yes. Easy Secure Login is free to download and use from the official WordPress.org plugin directory.
Is Easy Secure Login safe to use in 2026?
Easy Secure Login works, but test it on a staging site before relying on it in 2026. It runs on 40+ sites, is rated 5/5 and was last updated 2 months ago, and scores 54/100 on our health check.
How many websites use Easy Secure Login?
Easy Secure Login is active on 40+ WordPress websites and has been downloaded 1,526 times since it launched in October 2025. It was downloaded 164 times in the last 30 days.
Does Easy Secure Login work with WordPress 7.1?
Easy Secure Login is officially tested up to WordPress 7.0.6, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
What PHP version does Easy Secure Login need?
Easy Secure Login requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Easy Secure Login last updated?
The latest version, 2.2.6, was released on August 2, 2026 (2 months ago).
Who makes Easy Secure Login?
Easy Secure Login is developed and maintained by ateeqdev.
What are the best alternatives to Easy Secure Login?
The most popular alternatives to Easy Secure Login are Log in with Google (6K+ installs), UsersWP – Social Login (2K+ installs) and Happy Social Login (90+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
