PluginScout

JWT Authentication for WP REST APIs

by miniOrange · WordPress.org page · Website

v4.7.0 Tested up to WP 7.0.4 PHP 5.6+

JWT Authentication for WP REST APIs has 10,000+ active installs on WordPress.org and 541,580 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on September 2, 2026, tested up to WordPress 7.0.4.

JWT Authentication for WP REST APIs at a glance

Active installs
10,000+
Total downloads
541,580
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is JWT Authentication for WP REST APIs well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Behind
tested up to WordPress 7.0.4, not yet with the current 7.1
One-star reviews
12%
9 of 74 reviews on WordPress.org

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Authenticate all REST API endpoints (Default WP, Custom APIs,Third-Party plugins)
  • JWT Token Authentication (JSON Web Token Authentication)
  • Login, Refresh and Revoke token endpoints for token management
  • API Key Authentication
  • Basic Authentication (username/password and email/password)
  • OAuth 2.0 Authentication
  • Universal API key and User-specific API key for authentication
  • Selective API protection
  • Disable WP REST APIs
  • Time-based token expiry
  • Role-based WP REST API authentication
  • Custom Header support rather than just Authorization to increase security

JWT Authentication for WP REST APIs reviews and ratings

74 reviews on WordPress.org, with the most recent ones as their authors posted them.

All reviews
4.4 out of 5

74 reviews

5★
62
4★
0
3★
2
2★
1
1★
9

  • Highly Recommend

    Great support, OAuth 2.0 API works like a charm!!

    keithhamilton

  • 5 Years of Excellence – Professionals You Can Truly Rely On!

    After 5 years of using the paid version of this plugin, I must say I am beyond impressed. We use this plugin to secure our API and manage the access keys for our REST API, and for nearly the entire time, it has worked flawlessly. In the rare instances where I encountered an issue, the team behind this plugin proved to be absolute professionals. They didn’t just send generic replies; they scheduled screen-sharing sessions with me and solved every problem quickly and efficiently. I want to give a special thanks to Vidushi Gupta. She has been incredibly helpful, kind, and professional throughout our interactions. Having someone like her to rely on makes all the difference. I will likely remain a customer for at least another 5 years. They are professional, highly efficient, and their customer service is top-notch! If you are looking for a reliable company with a team of experts you can trust, this is the one. Thank you so much, guys – and especially Vidushi – you are simply the best!

    idoshariz

  • Great Support

    Great support from the MiniOrange team! Atul and Vidushi are very helpful and lightning fast to respond.

    Remwes, LLC

  • Great support.

    Swapnil was very helpful in resolving my issue. I enjoyed the support received by the mini orange team.

    pete207

  • Great support

    I needed support for some custom routes using miniOrang auth and support was great, helped me to solve my problems

    guglielmino

  • Fabulous support

    Fast and easy support - even for the free version. Thank you

    rvsg1

JWT Authentication for WP REST APIs alternatives

Plugins that solve the same problem, ranked by how closely they overlap with JWT Authentication for WP REST APIs.

All JWT Authentication for WP REST APIs alternatives

Details

Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2, or external token.

The full description, screenshots and every review live on the WordPress.org page.

Tags

  • API key
  • jwt authentication
  • rest
  • rest-api
  • secure api

More from miniOrange

Version
4.7.0
Last updated
Sep 2, 2026
First published
May 9, 2019
Requires WordPress
3.0.1
Tested up to
7.0.4
Requires PHP
5.6
Pricing
Free on WordPress.org

JWT Authentication for WP REST APIs FAQ

What does JWT Authentication for WP REST APIs do?

According to its WordPress.org readme, JWT Authentication for WP REST APIs offers Authenticate all REST API endpoints (Default WP, Custom APIs,Third-Party plugins), JWT Token Authentication (JSON Web Token Authentication), Login, Refresh and Revoke token endpoints for token management, API Key Authentication and Basic Authentication (username/password and email/password).

How many active installs does JWT Authentication for WP REST APIs have?

WordPress.org reports 10,000+ active installs for JWT Authentication for WP REST APIs as of September 7, 2026.

Is JWT Authentication for WP REST APIs still maintained?

Yes. The last release was on September 2, 2026 and it is tested up to WordPress 7.0.4.

Is JWT Authentication for WP REST APIs free?

JWT Authentication for WP REST APIs is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.