{"id":2198,"date":"2026-09-15T17:00:57","date_gmt":"2026-09-15T09:00:57","guid":{"rendered":"https:\/\/zaf.web.id\/blog\/?p=2198"},"modified":"2026-10-05T17:01:22","modified_gmt":"2026-10-05T09:01:22","slug":"passkey-webauthn-login-admin-wordpress-ojs","status":"publish","type":"post","link":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/","title":{"rendered":"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS"},"content":{"rendered":"<p>Dari sekian banyak website yang pernah saya bersihkan dari malware, jalur masuk yang paling sering adalah kredensial yang bocor atau terlalu lemah. Salah satu tren keamanan web 2026 adalah beralih ke login tanpa password menggunakan passkey dan hardware security key berbasis WebAuthn.<\/p>\n<h2>Cara kerja singkat<\/h2>\n<p>Saat mendaftarkan passkey, perangkat membuat sepasang kunci. Kunci publik disimpan server, kunci privat tetap di perangkat dan dibuka dengan sidik jari, wajah, atau PIN. Karena passkey terikat pada domain asli, halaman phishing di domain palsu tidak bisa memintanya.<\/p>\n<p>&nbsp;<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2201\" src=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELPIijBjyvbGWW1-pOvA-AaELPIijkTlSIusEKdPCrw.jpg?resize=1680%2C944&#038;ssl=1\" alt=\"Diagram cara kerja passkey dan WebAuthn\" width=\"1680\" height=\"944\" srcset=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELPIijBjyvbGWW1-pOvA-AaELPIijkTlSIusEKdPCrw.jpg?w=1680&amp;ssl=1 1680w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELPIijBjyvbGWW1-pOvA-AaELPIijkTlSIusEKdPCrw.jpg?resize=300%2C169&amp;ssl=1 300w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELPIijBjyvbGWW1-pOvA-AaELPIijkTlSIusEKdPCrw.jpg?resize=1024%2C575&amp;ssl=1 1024w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELPIijBjyvbGWW1-pOvA-AaELPIijkTlSIusEKdPCrw.jpg?resize=768%2C432&amp;ssl=1 768w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELPIijBjyvbGWW1-pOvA-AaELPIijkTlSIusEKdPCrw.jpg?resize=1536%2C863&amp;ssl=1 1536w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Penerapan di WordPress<\/h2>\n<ul>\n<li>Gunakan plugin two-factor atau passkey yang aktif dikelola. Cek tanggal update terakhir, jumlah instalasi, dan pengelolanya, sesuai pelajaran dari kasus supply chain attack.<\/li>\n<li>Wajibkan passkey atau security key untuk semua akun dengan peran Administrator dan Editor.<\/li>\n<li>Simpan metode cadangan (backup code) di tempat aman agar tidak terkunci dari dashboard.<\/li>\n<li>Tambahkan hardening dasar di wp-config.php:<br \/>\n<code>define('DISALLOW_FILE_EDIT', true);<\/code><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2202\" src=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELSU6Ca1DYDGBA2klGGw-AaELSU6CuFM_ouqml7eW2Q.jpg?resize=1680%2C944&#038;ssl=1\" alt=\"Prompt passkey browser saat login ke WordPress\" width=\"1680\" height=\"944\" srcset=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELSU6Ca1DYDGBA2klGGw-AaELSU6CuFM_ouqml7eW2Q.jpg?w=1680&amp;ssl=1 1680w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELSU6Ca1DYDGBA2klGGw-AaELSU6CuFM_ouqml7eW2Q.jpg?resize=300%2C169&amp;ssl=1 300w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELSU6Ca1DYDGBA2klGGw-AaELSU6CuFM_ouqml7eW2Q.jpg?resize=1024%2C575&amp;ssl=1 1024w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELSU6Ca1DYDGBA2klGGw-AaELSU6CuFM_ouqml7eW2Q.jpg?resize=768%2C432&amp;ssl=1 768w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELSU6Ca1DYDGBA2klGGw-AaELSU6CuFM_ouqml7eW2Q.jpg?resize=1536%2C863&amp;ssl=1 1536w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Bagaimana dengan OJS?<\/h2>\n<p>OJS belum menyediakan passkey secara bawaan. Alternatif yang realistis adalah menaruh halaman manajemen di belakang lapisan identitas, misalnya Cloudflare Access yang terhubung ke penyedia identitas kampus atau Google Workspace yang sudah mendukung passkey. Dengan begitu, hanya pengelola jurnal yang terverifikasi yang bisa mencapai halaman login.<\/p>\n<h2>Mulai dari mana?<\/h2>\n<p>Aktifkan passkey di akun email dan penyedia hosting terlebih dahulu, karena keduanya adalah kunci utama untuk memulihkan akun lain. Setelah itu baru ke dashboard website.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dari sekian banyak website yang pernah saya bersihkan dari malware, jalur masuk yang paling sering&hellip;<\/p>\n","protected":false},"author":1,"featured_media":2199,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[332,333],"tags":[],"class_list":["post-2198","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-devops"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS - Ahmad Zafrullah<\/title>\n<meta name=\"description\" content=\"Mengenal passkey dan WebAuthn untuk login tanpa password yang tahan phishing, serta opsi penerapannya pada admin WordPress dan OJS.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS - Ahmad Zafrullah\" \/>\n<meta property=\"og:description\" content=\"Mengenal passkey dan WebAuthn untuk login tanpa password yang tahan phishing, serta opsi penerapannya pada admin WordPress dan OJS.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/\" \/>\n<meta property=\"og:site_name\" content=\"Ahmad Zafrullah\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/23Pstars\" \/>\n<meta property=\"article:author\" content=\"http:\/\/www.facebook.com\/23Pstars\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-15T09:00:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-05T09:01:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1680\" \/>\n\t<meta property=\"og:image:height\" content=\"944\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Zaf\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@23Pstars\" \/>\n<meta name=\"twitter:site\" content=\"@23Pstars\" \/>\n<meta name=\"twitter:label1\" content=\"Ditulis oleh\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zaf\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimasi waktu membaca\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 menit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/\"},\"author\":{\"name\":\"Zaf\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\"},\"headline\":\"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS\",\"datePublished\":\"2026-09-15T09:00:57+00:00\",\"dateModified\":\"2026-10-05T09:01:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/\"},\"wordCount\":231,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\"},\"image\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1\",\"articleSection\":[\"AI\",\"DevOps\"],\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/\",\"url\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/\",\"name\":\"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS - Ahmad Zafrullah\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1\",\"datePublished\":\"2026-09-15T09:00:57+00:00\",\"dateModified\":\"2026-10-05T09:01:22+00:00\",\"description\":\"Mengenal passkey dan WebAuthn untuk login tanpa password yang tahan phishing, serta opsi penerapannya pada admin WordPress dan OJS.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#breadcrumb\"},\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1\",\"width\":1680,\"height\":944,\"caption\":\"Ilustrasi login menggunakan passkey dan security key\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/passkey-webauthn-login-admin-wordpress-ojs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/\",\"name\":\"Ahmad Zafrullah\",\"description\":\"Work to Learn is better than Learn how to Work\",\"publisher\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\",\"name\":\"Zaf\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\",\"width\":300,\"height\":300,\"caption\":\"Zaf\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\"},\"sameAs\":[\"http:\\\/\\\/zaf.web.id\",\"http:\\\/\\\/www.facebook.com\\\/23Pstars\",\"https:\\\/\\\/x.com\\\/23Pstars\"],\"url\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/author\\\/zaf\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS - Ahmad Zafrullah","description":"Mengenal passkey dan WebAuthn untuk login tanpa password yang tahan phishing, serta opsi penerapannya pada admin WordPress dan OJS.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/","og_locale":"id_ID","og_type":"article","og_title":"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS - Ahmad Zafrullah","og_description":"Mengenal passkey dan WebAuthn untuk login tanpa password yang tahan phishing, serta opsi penerapannya pada admin WordPress dan OJS.","og_url":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/","og_site_name":"Ahmad Zafrullah","article_publisher":"http:\/\/www.facebook.com\/23Pstars","article_author":"http:\/\/www.facebook.com\/23Pstars","article_published_time":"2026-09-15T09:00:57+00:00","article_modified_time":"2026-10-05T09:01:22+00:00","og_image":[{"width":1680,"height":944,"url":"https:\/\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg","type":"image\/jpeg"}],"author":"Zaf","twitter_card":"summary_large_image","twitter_creator":"@23Pstars","twitter_site":"@23Pstars","twitter_misc":{"Ditulis oleh":"Zaf","Estimasi waktu membaca":"2 menit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#article","isPartOf":{"@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/"},"author":{"name":"Zaf","@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed"},"headline":"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS","datePublished":"2026-09-15T09:00:57+00:00","dateModified":"2026-10-05T09:01:22+00:00","mainEntityOfPage":{"@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/"},"wordCount":231,"commentCount":0,"publisher":{"@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed"},"image":{"@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1","articleSection":["AI","DevOps"],"inLanguage":"id","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/","url":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/","name":"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS - Ahmad Zafrullah","isPartOf":{"@id":"https:\/\/zaf.web.id\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#primaryimage"},"image":{"@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1","datePublished":"2026-09-15T09:00:57+00:00","dateModified":"2026-10-05T09:01:22+00:00","description":"Mengenal passkey dan WebAuthn untuk login tanpa password yang tahan phishing, serta opsi penerapannya pada admin WordPress dan OJS.","breadcrumb":{"@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#breadcrumb"},"inLanguage":"id","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/"]}]},{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#primaryimage","url":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1","contentUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1","width":1680,"height":944,"caption":"Ilustrasi login menggunakan passkey dan security key"},{"@type":"BreadcrumbList","@id":"https:\/\/zaf.web.id\/blog\/passkey-webauthn-login-admin-wordpress-ojs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zaf.web.id\/blog\/"},{"@type":"ListItem","position":2,"name":"Login Tanpa Password: Passkey dan WebAuthn untuk Admin WordPress dan OJS"}]},{"@type":"WebSite","@id":"https:\/\/zaf.web.id\/blog\/#website","url":"https:\/\/zaf.web.id\/blog\/","name":"Ahmad Zafrullah","description":"Work to Learn is better than Learn how to Work","publisher":{"@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zaf.web.id\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id"},{"@type":["Person","Organization"],"@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed","name":"Zaf","image":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1","url":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1","contentUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1","width":300,"height":300,"caption":"Zaf"},"logo":{"@id":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1"},"sameAs":["http:\/\/zaf.web.id","http:\/\/www.facebook.com\/23Pstars","https:\/\/x.com\/23Pstars"],"url":"https:\/\/zaf.web.id\/blog\/author\/zaf\/"}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1457,"url":"https:\/\/zaf.web.id\/blog\/masalah-user-tidak-bisa-login-ssh-di-cwp\/","url_meta":{"origin":2198,"position":0},"title":"Masalah User Tidak Bisa Login SSH di CWP","author":"Zaf","date":"Maret 14, 2019","format":false,"excerpt":"Akses SSH bagi user baru di CWP secara default adalah disable dengan alasan keamanan. Kita bisa mengaktifkan akses SSH hanya dengan mencentang enable SSH pada saat membuat atau memperbaiki user di CWP. Namun terkadang meskipun SSH nya sudah di-enable, user tetap tidak dapat melakukan login ke server berbasis CWP dengan\u2026","rel":"","context":"dalam &quot;Server&quot;","block_context":{"text":"Server","link":"https:\/\/zaf.web.id\/blog\/category\/server\/"},"img":{"alt_text":"SSH Enable CWP","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/04\/Screen-Shot-2019-04-14-at-08.27.20-1024x521.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/04\/Screen-Shot-2019-04-14-at-08.27.20-1024x521.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/04\/Screen-Shot-2019-04-14-at-08.27.20-1024x521.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":1562,"url":"https:\/\/zaf.web.id\/blog\/menggunakan-multi-factor-authentication-di-phpmyadmin\/","url_meta":{"origin":2198,"position":1},"title":"Menggunakan Multi-Factor Authentication di phpMyAdmin","author":"Zaf","date":"Oktober 15, 2019","format":false,"excerpt":"Tidak sedikit web developers yang lebih nyaman menggunakan akses phpMyAdmin (PMA) melalui sebuah link. Link yang umum digunakan seperti: domain.com\/phpmyadmin domain.com\/pma domain.com\/_pma dan sebagainya... Hanya saja pola seperti ini justru menjadi kerentanan sendiri. Banyak orang yang sudah mengetahui pola link tersebut, termasuk attacker. Jenis autentikasi yang hanya menggunakan username dan\u2026","rel":"","context":"dalam &quot;Coretan&quot;","block_context":{"text":"Coretan","link":"https:\/\/zaf.web.id\/blog\/category\/coretan\/"},"img":{"alt_text":"Login PMA","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/11\/Screen-Shot-2019-11-15-at-10.13.04.png?fit=1200%2C822&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/11\/Screen-Shot-2019-11-15-at-10.13.04.png?fit=1200%2C822&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/11\/Screen-Shot-2019-11-15-at-10.13.04.png?fit=1200%2C822&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/11\/Screen-Shot-2019-11-15-at-10.13.04.png?fit=1200%2C822&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2019\/11\/Screen-Shot-2019-11-15-at-10.13.04.png?fit=1200%2C822&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":791,"url":"https:\/\/zaf.web.id\/blog\/update-source-otomatis-dari-bitbucket-dan-github\/","url_meta":{"origin":2198,"position":2},"title":"Update Source otomatis dari Bitbucket dan GitHub","author":"Zaf","date":"Mei 22, 2016","format":false,"excerpt":"Siapa yang tidak kenal kedua GIT repository tersebut, dengan semua fasilitas yang\u00a0disediakan oleh Bitbucket dan GitHub membuat para developer nyaman untuk menitipkan source project mereka disana. Saya\u00a0menggunakan Bitbucket cukup lama, hanya baru-baru ini mulai menggunakan GitHub. Mengingat\u00a0kebijakan pricing yang diterapkan kedua layanan tersebut sedikit berbeda, untuk versi free Bitbucket memungkinkan\u2026","rel":"","context":"dalam &quot;Coretan&quot;","block_context":{"text":"Coretan","link":"https:\/\/zaf.web.id\/blog\/category\/coretan\/"},"img":{"alt_text":"Bitbucket and GitHub","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2015\/12\/github-bitbucket-300x172.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":839,"url":"https:\/\/zaf.web.id\/blog\/fasilitas-layanan-it-mahasiswa-ugm\/","url_meta":{"origin":2198,"position":3},"title":"Fasilitas layanan IT mahasiswa UGM","author":"Zaf","date":"April 14, 2016","format":false,"excerpt":"Hampir 1 tahun\u00a0menjalani aktivitas sebagai mahasiswa UGM, banyak\u00a0hal baru yang saya dapat dan pelajari. Dua diantaranya yang paling terasa adalah science dan\u00a0service. Science adalah seperti\u00a0universitas pada umumnya, namun lebih fokus pada research. Untuk service\u00a0(terutama layanan IT) selain yang sudah dipaparkan pada pengenalan kampus diawal masuk, beberapa layanan yang waktu itu\u2026","rel":"","context":"dalam &quot;Coretan&quot;","block_context":{"text":"Coretan","link":"https:\/\/zaf.web.id\/blog\/category\/coretan\/"},"img":{"alt_text":"logo-ugm","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/04\/logo-ugm-289x300.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":918,"url":"https:\/\/zaf.web.id\/blog\/website-dinas-pu-lombok-utara\/","url_meta":{"origin":2198,"position":4},"title":"Website Dinas PU Lombok Utara","author":"Zaf","date":"September 3, 2016","format":false,"excerpt":"Domain instansi pemerintah (khususnya .go.id dan .desa.id) saat ini tidak boleh lagi dikelola oleh pihak ketiga, tetapi harus dikelola oleh pegawai dalam instansi tersebut. Tetapi masalahnya adalah\u00a0tidak semua instansi memiliki tenaga IT yang sempat\u00a0mengurus pendaftaran\u00a0domain ataupun mengelola sebuah website, dalam hal ini adalah website.\u00a0Baru baru ini saya diminta untuk membuat\u2026","rel":"","context":"dalam &quot;Coretan&quot;","block_context":{"text":"Coretan","link":"https:\/\/zaf.web.id\/blog\/category\/coretan\/"},"img":{"alt_text":"Dinas PU KLU Administrator","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/08\/Screen-Shot-2016-09-05-at-8.37.00-PM.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/08\/Screen-Shot-2016-09-05-at-8.37.00-PM.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/08\/Screen-Shot-2016-09-05-at-8.37.00-PM.png?resize=525%2C300 1.5x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/08\/Screen-Shot-2016-09-05-at-8.37.00-PM.png?resize=700%2C400 2x"},"classes":[]},{"id":424,"url":"https:\/\/zaf.web.id\/blog\/error-log-apace-di-webuzo\/","url_meta":{"origin":2198,"position":5},"title":"Error log Apace di Webuzo","author":"Zaf","date":"November 8, 2014","format":false,"excerpt":"Secara default\u00a0error_log file Apache tidak muncul\u00a0dalam direktori dimana tempat script tersimpan,\u00a0kemudian untuk debugging bisa dengan stream langsung log aktifitasnya\u00a0dari default path error log. Pertama login dulu via SSH ke server: Selanjutnya stream file log menggunakan program tail, misalnya saya ingin membuka log error untuk domain zaf.web.id :","rel":"","context":"dalam &quot;Server&quot;","block_context":{"text":"Server","link":"https:\/\/zaf.web.id\/blog\/category\/server\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4zLnS-zs","jetpack_featured_media_url":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaELOpXe8EbU29t3H3xZeQ-AaELOpXeUhODt40g-Li3EA.jpg?fit=1680%2C944&ssl=1","_links":{"self":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts\/2198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/comments?post=2198"}],"version-history":[{"count":2,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts\/2198\/revisions"}],"predecessor-version":[{"id":2203,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts\/2198\/revisions\/2203"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/media\/2199"}],"wp:attachment":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/media?parent=2198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/categories?post=2198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/tags?post=2198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}