WP One Tap Google Sign In
Secure Google One Tap sign-in for WordPress login pages, with account linking and admin activity logs.
Use with caution
WP One Tap Google Sign In works, but test it on a staging site before relying on it in 2026. It runs on 10+ sites and was last updated 4 months ago, and scores 51/100 on our health check.
- Small user base (10+ active installs)
- Very few reviews so far
- Needs PHP 8.1 or newer
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where WP One Tap Google Sign In stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| authentication | >100 |
| Google Login | >100 |
| google one tap | #19 |
| passwordless login | #95 |
| wordpress login | >100 |
Version adoption
Share of active sites per release.
About WP One Tap Google Sign In
From the official readme · v1.2.1Description
WP One Tap Google Sign In adds Google One Tap authentication to WordPress. It helps site owners offer a faster, passwordless login experience while keeping authentication tied to existing WordPress user accounts.
When a visitor signs in with Google, the plugin verifies the Google ID token server-side, checks the configured OAuth client ID, confirms the Google email is verified, and then signs in the matching WordPress user. The plugin also supports site-wide display for logged-out visitors, a customizable companion message block, and direct Google account linking from WordPress user profiles.
Key Features
- Google One Tap prompt on the WordPress login screen.
- Optional site-wide One Tap prompt for logged-out visitors.
- Server-side Google ID token verification with WordPress HTTP APIs.
- Existing-user login only by default.
- Google account linking and disconnect controls on WordPress user profiles.
- Automatic account-link migration after a successful verified email login.
- Admin activity log for successful logins, failed attempts, account linking, and unlinking events.
- Salted hashes for IP addresses and Google account identifiers in the activity log.
- Optional custom message block with image, title, and formatted content.
- WordPress 7.0-ready metadata with PHP 8.1, 8.2, and 8.3 compatibility.
Security Approach
The plugin uses WordPress nonces for AJAX requests, sanitizes all incoming data, escapes admin output, and validates the Google token audience against the configured OAuth client ID. It does not create new users automatically. A Google login succeeds only when the verified Google account maps to an existing WordPress user.
Privacy
The activity log stores the Google email address used during an event, the WordPress user ID when available, event status, event reason, user agent, and salted hashes of the request IP address and Google account identifier. Activity records older than 90 days are pruned automatically when new events are logged.
Configuration
Create a Google OAuth Client ID
- Open the Google Cloud Console credentials page:
https://console.developers.google.com/apis/credentials - Create an OAuth 2.0 Client ID.
- Choose Web application as the application type.
- Add your WordPress site’s authorized JavaScript origin.
- Copy the client ID into Settings > One Tap GSI.
Link a WordPress User to Google
- Open Users > Profile for your own account, or edit another user if your role allows it.
- Find the Google One Tap Sign-In section.
- Use the Google button to link a verified Google account.
- To disconnect, check Disconnect this Google account and save the profile.
Customize the Message Block
- Go to Settings > One Tap GSI.
- Enable the custom message block.
- Choose an image from the Media Library or enter an image URL.
- Add a short title and supporting formatted content.
- Save the settings.
Installation
- Upload the
wp-one-tap-google-sign-infolder to the/wp-content/plugins/directory. - Activate the plugin through the Plugins screen in WordPress.
- Go to Settings > One Tap GSI.
- Enter your Google OAuth 2.0 Web application client ID.
- Confirm that your site’s login URL is allowed in your Google OAuth application configuration.
- Choose whether One Tap should appear only on the login page or site-wide for logged-out visitors.
- Add optional custom message content if you want supporting copy beside the One Tap prompt.
Frequently asked questions
Does this plugin create new WordPress users?
No. WP One Tap Google Sign In signs in existing WordPress users only. It does not automatically register new users.
Can users disconnect their Google account?
Yes. Users can disconnect the linked Google account from their WordPress profile. Administrators with permission to edit users can also manage the link for other accounts.
What happens if a user changes their Google email address?
After account linking, the plugin uses Google’s stable account identifier for future logins. This is more reliable than email-only matching.
Where can I view login attempts?
Go to Settings > One Tap GSI Activity to review recent sign-in, linking, and unlinking events.
Does the plugin store raw IP addresses?
No. The plugin stores a salted hash of the request IP address for correlation in security reviews.
Is this compatible with WordPress 7.0 and modern PHP?
The plugin metadata targets WordPress 7.0 and PHP 8.1 or higher. The code avoids dynamic properties, deprecated Google client dependencies, and older PHP patterns that commonly cause warnings on PHP 8.2 and PHP 8.3.
Changelog
Requires PHP 8.1 or higher. Recommended for sites running PHP 8.1, 8.2, or 8.3.
1.2.1
- [Changed] Raised the minimum PHP requirement to 8.1 for production readiness on PHP 8.1, 8.2, and 8.3.
- [Changed] Updated Composer and WordPress.org metadata to match the PHP 8.1+ support policy.
- [Fixed] Updated package metadata for PHP 8.1+ and Google API client compatibility.
1.2.0
- [Added] Google account linking and disconnect controls on WordPress user profiles.
- [Added] Admin activity log for login, failed login, link, and unlink events.
- [Added] Automatic account-link migration after successful verified email login.
- [Changed] Reworked runtime token verification to use WordPress HTTP APIs.
- [Changed] Updated plugin ownership metadata to Sunil Kumar Sharma,
sunilkumarthz, and wpsimplified.in. - [Changed] Expanded WordPress.org readme documentation with setup, security, privacy, and FAQ details.
- [Security] Uses Google’s stable account identifier after linking and stores IP/Google identifiers as salted hashes in the audit log.
1.1.0
- [Added] Declared WordPress 7.0, PHP 7.4, and modern Composer package requirements.
- [Changed] Reworked script loading to use
wp_enqueue_script()for the Google Identity Services client and stable plugin asset versions. - [Changed] Updated admin settings text, escaping, sanitization, and localization for WordPress Coding Standards.
- [Fixed] Corrected login AJAX responses to use structured JSON instead of raw strings.
- [Security] Added AJAX nonce verification, stricter Google ID token validation, audience checks, and verified-email enforcement before setting WordPress auth cookies.
1.0.1
- Initial public release.
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best WP One Tap Google Sign In alternatives
All authentication plugins →
FAQ
WP One Tap Google Sign In: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 29, 2026
Is WP One Tap Google Sign In free?
Yes. WP One Tap Google Sign In is free to download and use from the official WordPress.org plugin directory.
Is WP One Tap Google Sign In safe to use in 2026?
WP One Tap Google Sign In works, but test it on a staging site before relying on it in 2026. It runs on 10+ sites and was last updated 4 months ago, and scores 51/100 on our health check.
How many websites use WP One Tap Google Sign In?
WP One Tap Google Sign In is active on 10+ WordPress websites and has been downloaded 1,937 times since it launched in October 2020. It was downloaded 93 times in the last 30 days.
Does WP One Tap Google Sign In work with WordPress 7.1?
WP One Tap Google Sign In is officially tested up to WordPress 7.0.6, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
What PHP version does WP One Tap Google Sign In need?
WP One Tap Google Sign In requires PHP 8.1 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was WP One Tap Google Sign In last updated?
The latest version, 1.2.1, was released on June 6, 2026 (4 months ago).
Who makes WP One Tap Google Sign In?
WP One Tap Google Sign In is developed and maintained by Sunil Kumar Sharma.
What are the best alternatives to WP One Tap Google Sign In?
The most popular alternatives to WP One Tap Google Sign In are Limit Login Attempts (300K+ installs), WPS Limit Login (100K+ installs) and Two Factor (100K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
