Password protect your Craft sites.

Allows users to delete their own account within Twig templates

SAML SSO Service Provider

Integrate Google’s reCAPTCHA (v2) into your forms.

Allow your visitors to social login and register to your Craft website with web services like Facebook, Google, Twitter…

Easy Maintenance Mode and Smart HTTPS Routing

Uses reCAPTCHA v3 to guess whether the user is a human or robot.

Encode email addresses in your templates to thwart evil spam bots.

Enforce a password policy on your users.

Security scanner and monitor to keep your site and CMS secure.

Restrict access to the CP based on a IP whitelist

Craft 3 plugin for two-factor or two-step login using Time Based OTP.

Encode and hide emails from spam bots and web scrapers.

Incrementally enforced new and secure passwords.

Automatically validates forms and prevents spam bots from submitting to your site.

Field type that let you select one or more user groups

Purge Cloudflare caches from Craft.

Provide secure digital download links to your files.

Hide admin users from non-admin users

Return an AWS signed URL and proxy the download request.

Fully integrated Backup solution for Craft CMS. Backup to: Amazon S3, Dropbox, Google Drive, Softlayer Object Storage, FTP, SFTP. Receive emails notifications and much more!

Restrict which fields and tabs are visible to different user groups.

Automated update checker that notifies you of any pending updates

A simple plugin that adds a Twig Tag to obfuscate email addresses (by ROT13) in text fields or strings.

Content Security Policy (or CSP) generator using nonces.

Log adding/updating/deleting of elements

Simple user moderation plugin for Craft

Automatically login based on whitelisted IP, basic auth username or URL keys

Secure & restricted files download

Protect and track downloads. Prevent leech attempts.

Temporarily lock certain users out of the CP.

Companion plugin for Craft Report.

HTTP Basic Authentication within templates.

URL-safe encryption and masking.

Craft 3 plugin for respecting Do Not Track headers sent by browsers.

Integrate matt-west/craft-recaptcha with craftcms/guest-entries

Configure where to send users after they logout.

Harness the power of Akismet to fight Spam

Enable authentication to Craft through the use of JSON Web Tokens (JWT)

LinkedIn integration for Social

Serve password protected files

Monitor 404 HTTP not found exceptions. See which requests fail often.

Integrate hCAPTCHA validation into your forms.

Protects your different environments with an access password.

SAML Identity Provider

Password protect any page or entry.

Enable authentication to Craft with Amazon Cognito using JWTs

Extends Craft CMS permissions to allow locking down access to the Assets Page but still allow uploading.

This plugin extends the existing asset query and shows only the assets which has been uploaded by the current user.

Restrict user registration by domain in Craft CMS, allows you to limit who can register for your site based on their email address.

Seamless legacy user authentication for Craft CMS

A filter for twig to hash a string with sha512

Bastion Agent companion plugin for CraftCMS

Store and manage secrets in an encrypted file.

Email based Two-factor authentication plugin for Craft CMS

GitHub integration for Social

Connect to Strava with oAuth and get data via the Strava API

Use your Craft CMS credentials to authenticate with a GraphQL API powered by Hasura.io

Norwegian BankID login and registration plugin

GitLab integration for Social

All-in-One Google reCAPTCHA: v3 and v2 (Checkbox, Invisible).

Helps you detect if a user is being impersonated and get the originally signed in user

Plugin allows you to restrict who can clear each cache group.

Geetest plugin for Craft 3

Email address validation for user registrations, custom forms and more.