WP REST API Key Authentication
WP REST API Key Authentication adds a simple API key-based authentication method to the WordPress REST API. This plugin is perfect for developers who want to interact with the REST API securely without relying on…
Consider an alternative
WP REST API Key Authentication shows warning signs in 2026 — compare the alternatives below before installing. It runs on 10+ sites and was last updated 2 years ago, and scores 26/100 on our health check.
- Small user base (10+ active installs)
- Very few reviews so far
- No update in over a year
- Only tested up to WordPress 6.7 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where WP REST API Key Authenticat… stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| access-control | >100 |
| api authentication | >100 |
| API key | >100 |
| rest-api | >100 |
| security | >100 |
Version adoption
Share of active sites per release.
About WP REST API Key Authentication
From the official readme · v1.0Description
WP REST API Key Authentication adds a simple API key-based authentication method to the WordPress REST API. This plugin is perfect for developers who want to interact with the REST API securely without relying on complex OAuth authentication mechanisms.
Key Features:
- Multiple API Keys: Create and manage multiple API keys with custom names.
- Secure API Key Storage: API keys are hashed and securely stored in the WordPress database.
- Single Display for Security: API keys are shown only once after creation.
- REST API Access Control: Authenticate requests by including an API key in the
Authorizationheader. - Admin Interface: Manage API keys with a user-friendly admin page.
- Copy to Clipboard Popup: Easily copy generated API keys with a built-in popup.
The plugin is lightweight and integrates seamlessly with WordPress.
Usage
-
Generate an API Key:
- Go to API Keys in the WordPress admin menu.
- Enter a name for the API key and click “Generate API Key”.
- The API key will appear in a popup. Copy it immediately, as it will not be displayed again.
-
Use the API Key:
- Include the API key in the
Authorizationheader of your REST API requests:
Authorization: Bearer YOUR_API_KEY
- Include the API key in the
-
Delete API Keys:
- To revoke access, delete an API key from the API Keys admin page.
License
This plugin is licensed under the GPLv2 or later. See the License URI for details.
Installation
- Download the plugin ZIP file.
- Go to your WordPress admin dashboard and navigate to Plugins > Add New.
- Click on the Upload Plugin button and select the ZIP file.
- Click Install Now and then activate the plugin.
- Navigate to API Keys in the admin menu to start managing your API keys.
Frequently asked questions
How are API keys stored?
API keys are hashed using PHP’s password_hash function and stored securely in the WordPress database. The raw key is only shown once upon creation.
What happens if I lose an API key?
If you lose an API key, you must generate a new one. The plugin does not store raw API keys for security reasons.
How do I authenticate a REST API request?
Include the API key in the Authorization header using the Bearer token format: Authorization: Bearer YOUR_API_KEY
Can I create multiple API keys?
Yes, you can generate multiple API keys with custom names and manage them from the admin interface.
Changelog
Initial release. Add secure API key-based authentication to your REST API.
1.0
- Initial release.
- Added support for API key creation and deletion.
- Added REST API authentication using API keys.
- Added popup with “Copy to Clipboard” functionality for generated API keys.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best WP REST API Key Authentication alternatives
All access-control plugins →FAQ
WP REST API Key Authentication: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 20, 2026
Is WP REST API Key Authentication free?
Yes. WP REST API Key Authentication is free to download and use from the official WordPress.org plugin directory.
Is WP REST API Key Authentication safe to use in 2026?
WP REST API Key Authentication shows warning signs in 2026 — compare the alternatives below before installing. It runs on 10+ sites and was last updated 2 years ago, and scores 26/100 on our health check.
How many websites use WP REST API Key Authentication?
WP REST API Key Authentication is active on 10+ WordPress websites and has been downloaded 1,272 times since it launched in January 2025. It was downloaded 53 times in the last 30 days.
Does WP REST API Key Authentication work with WordPress 7.1?
WP REST API Key Authentication is officially tested up to WordPress 6.7.10, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does WP REST API Key Authentication need?
WP REST API Key Authentication requires PHP 7.2 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was WP REST API Key Authentication last updated?
The latest version, 1.0, was released on January 16, 2025 (2 years ago).
Who makes WP REST API Key Authentication?
WP REST API Key Authentication is developed and maintained by Kamal Hosen.
What are the best alternatives to WP REST API Key Authentication?
The most popular alternatives to WP REST API Key Authentication are PublishPress Capabilities:… (100K+ installs), Content Control (40K+ installs) and Restrict User Access (10K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card


