Fernando Claussen

Trew Knowledge

Force your admins and/or selected roles to update their password to a new one after a set amount of time. Users will also be unable to use a previously used password.
<h4>FORCE SPECIFIC ROLES TO CHANGE THEIR PASSWORDS</h4>
On the settings page, you can select which roles you want to enforce the password reset.
<h4>WHY FORCE ADMINS TO DO THIS?</h4>
If your site has several admins, all it takes is for one of them to have a weak password or to not change it often for someone to figure it out or brute force attack it. With access to only one of your admin accounts, the hacker can take total control of your website.
By forcing admins to change their password often and not allowing them to use previously used password, you add another layer of security to your data.
<h4>PRIVACY POLICY</h4>
This plugin does not share any data from the site or its users. The only data that is stored in the site’s database is the previously used encrypted passwords of users so they can’t use those again. That information never leaves the server where the plugin is installed and is never shared.
We do not have access to this or any other information.

Advanced Password Security

Nice!

Force your administrators to update their password after a set amount of time.

nexist

Ankur Chauhan

Keyy gives you 2-factor authentication with a difference. It replaces passwords with sophisticated RSA public-key cryptography, which results in stronger security and a better user experience.
<div class="embed-vimeo" style="text-align: center;"><iframe loading="lazy" src="https://player.vimeo.com/video/217465671" width="750" height="422" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe></div>
Keyy does away with typing:
<ul>
<li>Usernames</li>
<li>Passwords</li>
<li>One-time-passwords or other 2FA tokens</li>
</ul>
Instead, users log in simply using their mobile phone. It’s easy!
<ul>
<li>Install the Keyy app on your phone, available through Android or iOS (iPhone / iPad / iPod).</li>
<li>Secure the app using either a fingerprint or a 4-number pin</li>
<li>To log in, open the app and point it at the code shown on the screen. </li>
</ul>
Keyy gives you one-click access to all your WordPress websites simultaneously.
Security
Keyy has been built on RSA public-key cryptography, which is the same tried-and-tested technology underlying secure websites (SSL) and many other industry standards.
It involves a 2048-bit RSA digital key, which is created and stored on the user’s mobile phone. Keyy doesn’t keep a central database of user profile and login details, so you’re not reliant upon any third parties. The digital key is secured in the Android Keystore or Apple Keychain, only accessible via each user’s mobile phone protected by a fingerprint scan or a 6-digit PIN, so data remains safe even if the phone becomes lost or stolen.
Because it doesn’t use passwords, Keyy protects against a host of common password-stealing hacks, including:
<ul>
<li>Brute-forcing</li>
<li>Weak credentials</li>
<li>Key-logging</li>
<li>Password re-use</li>
<li>Shoulder-surfing</li>
<li>Connection sniffing</li>
</ul>
By strengthening individual account security, Keyy keeps the entire network safe.
Hold your phone up to any computer and you’re instantly logged in.
You need to have a device (e.g. phone or tablet) that uses either Android or iOS (e.g. iPhone, iPad).
N.B. This is our initial release. It is expected to be rough around the edges!
Please don’t hit us with a bad review before giving us a chance to improve the product; we’re very eager for your and suggestions feedback in the support channel.
In the coming weeks and months we will: 
* Launch a single-sign on feature, so logging into one site with Keyy logs you into all sites on that device 
* Ability to log on to a localhost site or other site without incoming Internet access (not currently possible) 
* Various other smaller improvements also planned
<h4>Features</h4>
<ul>
<li>
Login by scanning a code with your phone (or other device). No passwords to remember!
</li>
<li>
Industry-standard RSA encryption (assymetric keys) – your login key lives on your phone. There is no back-door access, even for us.
</li>
<li>
No central point of failure. The login instruction (signed by your unique private key) goes directly from your phone to your website; no third-party server is involved. You don’t get locked out if somebody else’s server is down.
</li>
<li>
Secret URL for de-activating Keyy: note and securely store this URL when you set up, and if you lose your phone later, you can use it to login using the ordinary WordPress username/password mechanism.
</li>
<li>
If you lose your phone, you can also disable the plugin through your web hosting account. i.e. You can’t be permanently logged out if you still have access to your WordPress install through your web hosting.
</li>
</ul>
<h4>Premium Features</h4>
The Premium version of this plugin adds these extra features:
<ul>
<li>
Ability to choose whether to require a password as well as, or instead of, a scan
</li>
<li>
Ability for administrators to impose scan/password policies on users (e.g. all editors require both)
</li>
<li>
Scan codes also appear on the WooCommerce and Affiliates-WP login forms and Theme My Login widgets and secondary login forms
</li>
<li>
Stealth mode: Hide the Keyy scan image until the user presses a key to reveal it
</li>
<li>
Hide username/password fields and require Keyy for all users
</li>
<li>
Mass contacting of all users with a connect scan code (useful when requiring Keyy of all users)
</li>
<li>
Ability for admins to view and over-ride settings for a specific user
</li>
<li>
Keyy admin pages do not show information about other products from our product family
</li>
<li>
Ability to customise/brand the “What is this?” message
</li>
<li>
Access to Premium support channels
</li>
</ul>

Keyy Two Factor Authentication (like Clef)

WordPress 2-Factor Authentication plugin that's high security and low hassle. Say goodbye to remembering usernames, passwords and tokens; say hel …

Advanced Password Security vs Keyy Two Factor Authentication (like Clef)