Peace Protocol enables WordPress site administrators to authenticate as their website and send cryptographically signed “peace” messages to other WordPress sites running the same protocol. This creates a decentralized network where admins can establish trust relationships, share peace, and enable cr
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 6.0 and PHP 7.4.
SourceWordPress plugins · Nov 4, 2026
01 / Source details
Aboutthistool.
Peace Protocol enables WordPress site administrators to authenticate as their website and send cryptographically signed “peace” messages to other WordPress sites running the same protocol. This creates a decentralized network where admins can establish trust relationships, share peace, and enable cross-site interactions.
🔒 **Security-First Design**
Admin-Only Authentication
WordPress Administrators Only : This plugin is designed exclusively for WordPress site administrators
Site-Level Authentication : Admins authenticate as their website, not as individual users
No Public Registration : No public user registration system – only federated users created after secure handshakes
Cryptographic Tokens : Each site uses cryptographically secure tokens for authentication
Federated User System
Limited Permissions : Federated users can only comment on posts, no admin access
Automatic Cleanup : Federated users are removed when the plugin is uninstalled
Role-Based Security : Federated users have the federated_peer role with minimal capabilities
No Dashboard Access : Federated users cannot access WordPress admin areas
Token Security
Cryptographically Secure : Tokens are generated using WordPress’s secure password generator
Token Rotation : Support for multiple tokens with automatic rotation
Secure Storage : Tokens are stored securely in WordPress options
Expiring Authorization Codes : Authorization codes expire after 5 minutes
🌟 **Key Features**
Core Functionality
Send Peace : Send cryptographically signed peace messages to other WordPress sites
Peace Log Wall : Display received peace messages using the [peaceprotocol_log_wall] shortcode
Automatic Feed Subscription : Automatically subscribe to peace feeds from sites you connect with
Token Management : Generate, rotate, and manage authentication tokens
User Banning System : Ban problematic users with reason tracking
IndieAuth Support : Alternative authentication using the IndieAuth standard with PKCE
Federated Login System
Cross-Site Authentication : Users from remote sites can comment as their site identity
Seamless Integration : Works with existing WordPress comment systems
Secure Handshake : Only sites completing the cryptographic handshake can create federated logins
Automatic User Creation : Creates federated users automatically after successful handshake
Dual Authentication : Support for both Peace Protocol tokens and IndieAuth standard
Admin Interface
Token Management : Generate, view, and delete authentication tokens
Feed Management : View and manage subscribed peace feeds
Peace Log : View all received peace messages in the admin area
User Banning : Ban users with reason tracking and management
Settings Configuration : Configure button position and auto-insertion
Frontend Features
Peace Button : Floating peace hand button (✌️) that can be positioned anywhere
Auto-Insertion : Automatically insert the peace button on your site
Shortcode Support : Use [peaceprotocol_hand_button] to manually place the button
Responsive Design : Works on all devices and screen sizes
Dark Mode Support : Automatically adapts to user’s color scheme preference
Choice Modal : User-friendly modal to choose between Peace Protocol and IndieAuth authentication
Technical Features
REST API : Modern REST API endpoints for all functionality
AJAX Fallback : AJAX endpoints for sites with REST API disabled
CORS Support : Proper CORS headers for cross-site communication
Translation Ready : Full internationalization support with multiple languages
Custom Post Types : Uses custom post types for peace logs
IndieAuth Endpoints : Full IndieAuth specification compliance with authorization and token endpoints
PKCE Support : Proof Key for Code Exchange for enhanced security
🚀 **How It Works**
For WordPress Administrators
01Install & Activate : Install the plugin and activate it on your WordPress site
02Generate Tokens : Go to Settings > Peace Protocol and generate authentication tokens
03Send Peace : Use the peace button to send cryptographically signed peace to other sites
04Build Network : Connect with other WordPress sites and build a network of trust
Federated Login Process
Peace Protocol Authentication
05User from Site A visits Site B and wants to comment
06User clicks “Peace” button on Site B
07User chooses “Login with Peace Protocol” from the choice modal
08Site B redirects to Site A for authentication
09Site A validates the user and generates an authorization code
10User is redirected back to Site B with the authorization code
11Site B automatically logs in the user as a federated user from Site A
12User can comment on Site B as “siteacom”
IndieAuth Authentication
13User from Site A visits Site B and wants to comment
14User clicks “Peace” button on Site B
15User chooses “Login with IndieAuth” from the choice modal
16Site B discovers IndieAuth endpoints on Site A
17Site B redirects to Site A’s IndieAuth authorization endpoint
18Site A validates the user and generates an authorization code
19User is redirected back to Site B with the authorization code
20Site B exchanges the code for an access token using PKCE
21Site B automatically logs in the user as a federated user from Site A
22User can comment on Site B as “Logged in as siteacom”
Security Flow
23Cryptographic Handshake : Sites exchange cryptographically signed tokens
24Token Validation : Each peace message is validated using secure tokens
25Federated User Creation : Only after successful handshake are federated users created
26Limited Permissions : Federated users have minimal permissions and no admin access
27Automatic Cleanup : All federated data is removed on plugin uninstall
🛡️ **Security Considerations**
What This Plugin Does NOT Do
❌ No Public User Registration : Only WordPress administrators can use this plugin (federated users are created automatically after secure handshakes)
❌ No Admin Access for Federated Users : Federated users cannot access WordPress admin
❌ No Database Access : Federated users cannot access sensitive site data
❌ No File System Access : Federated users cannot upload or modify files
❌ No Plugin/Theme Management : Federated users cannot install or modify plugins/themes
What This Plugin DOES Do
✅ Site-to-Site Authentication : WordPress admins authenticate as their website
✅ Cryptographic Verification : All peace messages are cryptographically signed
✅ Limited Federated Access : Federated users can only comment on posts
✅ Automatic Cleanup : All federated data is removed on uninstall
✅ Secure Token Management : Tokens are cryptographically secure and can be rotated
🌍 **Internationalization**
Peace Protocol is fully translation-ready and includes translations for: – English (default) – Spanish (es_ES) – French (fr_FR) – Japanese (ja) – Chinese Simplified (zh_CN)
See it in action
Screenshots & previews.
Peace Protocol Settings Page : Manage tokens, feeds, and configurationSend Peace Modal : Send cryptographically signed peace to other sitesPeace Log Wall : Display received peace messages using shortcode
02 / Source details
Gettingstarted.
01Upload the plugin files to /wp-content/plugins/peace-protocol/
02Activate the plugin through the ‘Plugins’ screen in WordPress
03Configure by going to Settings > Peace Protocol
04Generate Tokens for site authentication
05Customize button position and auto-insertion settings
03 / Source details
Frequently asked questions.
What is Peace Protocol?
Peace Protocol is a secure, decentralized protocol that allows WordPress site administrators to authenticate as their website and send cryptographically signed “peace” messages to other WordPress sites. It creates a network of trust between WordPress sites.
Who can use this plugin?
This plugin is designed exclusively for WordPress site administrators. Only administrators can generate tokens and send peace messages. Regular users cannot use the core functionality.
Is this secure?
Yes, Peace Protocol is built with security-first design: – Only WordPress administrators can use the core functionality – All authentication uses cryptographically secure tokens – Federated users have minimal permissions and cannot access admin areas – All federated data is automatically cleaned up on plugin uninstall – Authorization codes expire after 5 minutes
What are federated users?
Federated users are special WordPress users created when someone from another site completes a peace handshake. They can only comment on posts and cannot access the WordPress admin area. They are automatically removed when the plugin is uninstalled.
What is a “token” and why do I need multiple?
Tokens are cryptographically secure strings used to authenticate your site when sending peace to others. Generating multiple tokens allows you to rotate them for better security, and to revoke tokens if needed without losing access.
How do I send peace to another site?
Use the peace hand button (✌️) on your site or the [peaceprotocol_hand_button] shortcode. Enter the target site’s URL and an optional note, then send peace. The other site must also have the Peace Protocol plugin installed and activated.
What happens when I send peace?
Your site is subscribed to the other site’s feed, allowing you to follow their updates. The handshake is logged and can be viewed in your admin area. If the other site has the plugin, they’ll receive your peace message.
Can I unsubscribe from a feed?
Yes, you can manage your subscribed feeds from the Peace Protocol settings page in your WordPress admin.
What shortcodes are available?
[peaceprotocol_hand_button] – Display the peace button [peaceprotocol_log_wall] – Display received peace messages
Is this plugin translation-ready?
Yes! All user-facing text is translatable, and translation files for several languages are included (Spanish, French, Japanese, Chinese Simplified).
What features are planned for the future?
Future updates may include post liking, enhanced commenting, site discovery, and other social features to further connect the WordPress ecosystem.
Can I customize the peace button position?
Yes, you can configure the button position (top-right, top-left, bottom-right, bottom-left) in the Peace Protocol settings, or disable auto-insertion and use the shortcode instead.
What if I want to ban a user?
The plugin includes a comprehensive user banning system. You can ban users with reason tracking, and banned users cannot send peace or use any Peace Protocol features.
Website LLMs.txt and LLMs-Full.txt Generator is an LLMs.txt generator and llms-full.txt generator for WordPress. It helps site owners generate, manage, preview, validate, and serve AI discovery files from published public content. Use it to create structured /llms.txt and optional /llms-full.txt end
EngageDock AI is a customizable floating contact widget for WordPress websites that want more leads and faster visitor communication. It helps small businesses turn website traffic into calls, texts, emails, and callback requests from one clean contact panel. Key Features: Click-to-Call – One tap ca
Altify AI is an auto ALT text and AI ALT text plugin for WordPress images. It helps generate descriptive image ALT text for accessibility and image SEO. Use bulk image ALT text tools for your Media Library, generate featured image ALT text automatically, and scale WooCommerce image ALT updates with
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
