Signed Posts
Signed Posts allows authors to sign posts, assuring content integrity. Signature verification proves post-signing alteration hasn’t occurred.
Consider an alternative
Signed Posts shows warning signs in 2026 — compare the alternatives below before installing. Was last updated 7 months ago, and scores 36/100 on our health check.
- Small user base (<10 active installs)
- Very few reviews so far
- Only tested up to WordPress 6.9 (latest is 7.1)
- Needs PHP 8.2 or newer
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Signed Posts stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| did | >100 |
| openpgp | #4 |
| security | >100 |
| signature | >100 |
| verification | >100 |
About Signed Posts
From the official readme · v0.5Description
Signed Posts allows authors to sign posts, assuring content integrity. Signature verification proves post-signing alteration hasn’t occurred.
Features:
- In-browser verification: The signature verification is done on the client side (in the visitor’s browser).
- Methods: OpenPGP (ASCII-armored detached signature) and DID (did:key, did:web) using Ed25519 detached JWS (b64=false).
- Source of trust: For OpenPGP, the author specifies the URL of their public key in their profile. For DID, the author sets their DID (did:key or did:web). For did:web, the plugin fetches
https://<host>/.well-known/did.json. - Status block: An informative block is automatically added to the end of each signed article, showing the verification status (valid, invalid, or error).
- Author badge: The author name in posts is enhanced with an icon and KeyID/fingerprint text.
Source Code and Libraries
OpenPGP.js
* Version: 6.2.2
* License: LGPL-3.0-or-later
* Public Source Code: https://github.com/openpgpjs/openpgpjs
Web Crypto API
* Used to verify Ed25519 signatures for DID.
Installation
- Go to Plugins > Add New Plugin.
- Search for Signed Posts.
- Install and activate the Signed Posts plugin.
Frequently asked questions
How do I get the content of my post to sign it?
Once you’ve finished your post, click the three dots in the top-right corner of the Gutenberg editor. When the options menu opens, select “Copy all blocks.” That is the content you should sign.
Where can I host my OpenPGP public key?
You can host it on any service that offers direct links and allows CORS (Cross-Origin Resource Sharing) access.
What happens if the signature isn’t valid?
The plugin will display a warning message indicating that the signature doesn’t match the content or the public key, which can be a sign of content tampering.
Does the plugin affect my site’s performance?
The impact on the server is minimal, as the verification is performed entirely in the visitor’s browser. The only additional resource is the download of the public key, which is usually very small.
What format should I use to sign with DID?
Use Compact JWS (detached) with {"alg":"EdDSA","b64":false,"crit":["b64"],"kid":""} and sign the canonicalized post content (same text you would sign with OpenPGP).
Where do I set my DID?
In your User Profile, in the “Decentralized Identifiers (DID)” field. For did:web, ensure your did.json is hosted at https:///.well-known/did.json.
Changelog
[0.5] – 2026-03-07
- Updated minimum WordPress requirement to 6.9.
- Updated minimum PHP requirement to 8.2.
- Activation hook refactored to named function.
- Replaced deprecated wp_http_validate_url() with wp_is_valid_url().
- Dashicons enqueued conditionally to avoid redundant loading.
- Added type hints and return types to all functions (PHP 8.2+).
- Added PHPDoc blocks to all functions (WordPress-Docs standard).
- Extracted post signature data to a cached helper function to avoid redundant meta queries.
- Restored function_exists() guard for delete_post_meta_by_key() in uninstall handler.
[0.4] – 2025-10-08
- DID support added: did:key and did:web with Ed25519 JWS (detached).
- Method selector per post.
- DID field in user profile.
- Uninstall options extended to remove DID and method meta.
- Maintains full backward compatibility with OpenPGP flow.
[0.3] – 2025-10-03
- Author badge with icon and fingerprint text linked to the verification result.
- OpenPGP updated to 6.2.2.
- Some corrections.
[0.1] – 2025-09-23
- First version.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Signed Posts alternatives
All did plugins →FAQ
Signed Posts: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 15, 2026
Is Signed Posts free?
Yes. Signed Posts is free to download and use from the official WordPress.org plugin directory.
Is Signed Posts safe to use in 2026?
Signed Posts shows warning signs in 2026 — compare the alternatives below before installing. Was last updated 7 months ago, and scores 36/100 on our health check.
How many websites use Signed Posts?
Signed Posts is active on <10 WordPress websites and has been downloaded 551 times since it launched in October 2025. It was downloaded 56 times in the last 30 days.
Does Signed Posts work with WordPress 7.1?
Signed Posts is officially tested up to WordPress 6.9.10, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does Signed Posts need?
Signed Posts requires PHP 8.2 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Signed Posts last updated?
The latest version, 0.5, was released on March 7, 2026 (7 months ago).
Who makes Signed Posts?
Signed Posts is developed and maintained by Marc Armengou.
What are the best alternatives to Signed Posts?
The most popular alternatives to Signed Posts are Virtual Public Square (<10 installs) and miniOrange Digital Identity… (<10 installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
