stannie

authentiq

ziogaschr

<p>The <a href="https://www.authentiq.com/" rel="nofollow ugc">Authentiq</a> plugin allows users to simply use their phone to authenticate to your WordPress site, share their identity details safely, and sign out again remotely.</p>
<p>This plugin is for admins that are interested in moving beyond username and password, and do not want to burden their users with typing one time codes from SMS or authenticators or other methods that harm the user experience.</p>
<p>The <a href="https://www.authentiq.com/" rel="nofollow ugc">Authentiq</a> service is free (for most use cases) and does not store any user data centrally, but in the Authentiq ID app on the user’s phone instead.</p>
<p>Features:</p>
<ul>
<li>Use Authentiq as a convenience sign in (and sign up) method, or as a secure sign in method.</li>
<li>In the latter case, replacing one time passwords (TOTP) or hardware tokens, option to still accept accounts with classic username & password.</li>
<li>On every sign in, the profile information is explicitly shared by the Authentiq ID app and updated in the WordPress profile, thus keeping it up to date on every sign in.</li>
<li>Visitors to your site that already have the Authentiq ID app installed can simply sign up by scanning a QR code or typing their email address and confirm on their phone.</li>
<li>Block users by (verified) email domain, or limit to specific domains.</li>
<li>Optionally request social accounts, address, and (verified) phone numbers too.</li>
<li>Remote sign out: your users can sign out with their Authentiq ID app, even when they left their session signed in on another computer.</li>
<li>Existing users can activate Authentiq in their profile page for convenience or additional security.</li>
</ul>
<p>You can check our <a href="https://wordpress.demos.authentiq.io/" rel="nofollow ugc">demo site</a>.</p>
<h4>Widget</h4>
<p>You can have an Authentiq sign in button in any widgetized area / sidebar:</p>
<ol>
<li>Go to ‘WordPress Dashboard > Appearance > Widgets’.</li>
<li>Drag and drop the “Authentiq” widget into any widgetized area / sidebar.</li>
<li>Configure settings on the widget and click save.</li>
</ol>
<p>Place and configure as many Authentiq widgets as you want.</p>
<h4>Shortcodes</h4>
<p>The plugin can be placed anywhere in your site using WordPress shortcodes.</p>
<p>The shortcode is <code>[authentiq_login_button]</code>.</p>
<p>Additionally you can set some extra parameters, which are:</p>
<ul>
<li><strong>sign_in_text</strong>: Text shown in Authentiq button, when user <strong>is not</strong> signed in, in order to sign in.</li>
<li><strong>linking_text</strong>: Text shown in Authentiq button, when user <strong>is</strong> signed in, but is not linked with Authentiq yet, in order to link the user account.</li>
<li><strong>sign_out_text</strong>: Text shown in Authentiq button, when user <strong>is</strong> signed in and linked with Authentiq, in order to sign out.</li>
<li><strong>color_scheme</strong>: Authentiq button color scheme. Use a number from 0: default, 1: purple, 2: orange, 3: grey, 4: white.</li>
</ul>
<p>Example use: <code>[authentiq_login_button sign_in_text="Login" linking_text="Link your account" sign_out_text="Logout" color_scheme=1]</code>.</p>
<p>You can even place the <a href="http://docs.getshortcodes.com/article/52-using-of-shortcodes-in-template-files" rel="nofollow ugc">shortcode in your template files</a>.</p>


Authentiq

Sign in (and sign up) to WordPress sites using the Authentiq ID app. Strong authentication, without the passwords.

Jonathan Buhacoff

<p><a href="https://loginshield.com" rel="nofollow ugc">LoginShield</a> is an authentication system that features one-tap login, digital signatures, strong multi-factor authentication, and phishing protection. This is a passwordless login solution. Login with one tap instead of a password!</p>
<p>LoginShield for WordPress replaces the login page with the following secure sequence:</p>
<ol>
<li>Prompt for username</li>
<li>If user exists and has LoginShield enabled, use LoginShield; otherwise, prompt for password</li>
</ol>
<p>The LoginShield app is available for Android and iOS. <a href="https://loginshield.com/software/" rel="nofollow ugc">Get the app</a>.</p>
<h3>Benefits</h3>
<ul>
<li>Eliminate password and phishing attacks on user accounts</li>
<li>Quick and secure way to log in with one-tap, passwordless login</li>
<li>Don’t need to remember a password</li>
<li>Don’t need to rotate passwords for safety</li>
</ul>
<h3>Features</h3>
<h4>Self-service activation</h4>
<p>After you install and set up the LoginShield plugin, users can easily activate LoginShield for themselves in their profile settings page.</p>
<h4>One-tap login</h4>
<p>You and your users can log in to your WordPress site with just one tap.</p>
<p>For more information, read about <a href="https://loginshield.com/article/one-tap-login/" rel="nofollow ugc">one-tap login</a>.</p>
<h4>Digital signatures</h4>
<p>Some of the most common ways that accounts are hacked are weak passwords and stolen passwords. This is why so many sites require users to come up with passwords that have special characters, and to change their passwords periodically (in case a current password was reused somewhere and cracked). But this is annoying to users and doesn’t guarantee they will actually pick a secure password.</p>
<p>LoginShield uses digital signatures for authentication instead of passwords. This makes LoginShield a passwordless authentication system.</p>
<p>Digital signatures are far stronger protection for an account than passwords, and they don’t require the user to come up with anything or remember anything. LoginShield automatically generates and uses a separate credential for each website, so you can use the same LoginShield app to login to multiple sites.</p>
<p>LoginShield uses strong, modern cryptographic algorithms and parameters to ensure your accounts get the best protection available.</p>
<h4>Strong multi-factor authentication</h4>
<p>The LoginShield app itself can be protected by a password (which never leaves the mobile device) or a fingerprint. This is far better protection than the standard two-factor authentication that many sites use.</p>
<p>For more information, read about <a href="https://loginshield.com/article/authentication-factors/" rel="nofollow ugc">authentication factors</a>.</p>
<h4>Phishing protection</h4>
<p>LoginShield is the ONLY authentication solution to offer phishing protection.</p>
<p>Many data breaches start with a phishing email, tricking the user to log in to the attacker’s website that is impersonating the real website. Any website that uses passwords to log in is vulnerable to this.</p>
<p>Websites that use standard two-factor authentication codes are also vulnerable — whether they send the code via SMS or use an OTP app to display it, the fact that you enter that code into the website after the password prompt means a phishing attacker will also get the code.</p>
<p>Websites that use an authenticator app with push notifications are ALSO vulnerable to this, because they don’t confirm that you’re at the correct website when you tap the “login” button in the app.</p>
<p>Only LoginShield is able to detect that the user is not at a trusted website and route the user to the correct website, completely circumventing a credential-theft phishing attack.</p>
<p>For more information, read about <a href="https://loginshield.com/article/phishing-protection/" rel="nofollow ugc">phishing protection</a>.</p>
<h3>Pricing</h3>
<p>For current pricing and free trial details, <a href="https://loginshield.com/pricing/wordpress/" rel="nofollow ugc">visit our website</a>.</p>
<h3>Managing your LoginShield subscription</h3>
<p>You can visit <a href="https://loginshield.com" rel="nofollow ugc">https://loginshield.com</a> to manage your LoginShield subscription.</p>
<h3>Privacy</h3>
<p>The plugin shares the following information with <a href="https://loginshield.com" rel="nofollow ugc">LoginShield</a>. For more information, see our <a href="https://loginshield.com/notice/privacy/" rel="nofollow ugc">Privacy Policy</a>.</p>
<h4>Site Name, Site Icon, and Site URL</h4>
<p>When you activate and set up the plugin, it sends the site name, icon, and URL to LoginShield. This information is later displayed in the LoginShield app during login. If you deactivate or uninstall the plugin, and want to delete this information, you can visit <a href="https://loginshield.com" rel="nofollow ugc">https://loginshield.com</a> to delete your LoginShield account where this information is stored.</p>
<h4>User Name and Email</h4>
<p>When a user activates LoginShield in their profile settings, their name and email address are sent to LoginShield to register the user.</p>
<p>This information is later used by LoginShield for service-related communication with the user, such as our phishing protection feature. We DO NOT sell or share this information with anyone else, except as required by law. If the user deactivates LoginShield, and wants to delete this information, the user can visit <a href="https://loginshield.com" rel="nofollow ugc">https://loginshield.com</a> to delete their LoginShield account.</p>
<h4>Client ID</h4>
<p>When you activate the plugin, the plugin registers itself with LoginShield and receives a unique client ID. This client ID is then associated with the site name, icon, and URL, and is used to identify the WordPress site to LoginShield in all further backend communication, and is required so that users will be able to continue to log in even when you change the site name.</p>
<h4>Realm-Scoped User ID</h4>
<p>When a user activates LoginShield in their profile settings, a unique user id is generated and sent to LoginShield to register the user. This user id is NOT the same as the user’s WordPress user id, and is required so that a LoginShield user will be able to continue to log in even when they change their email address. If the user deactivates LoginShield, and wants to delete this information, the user can visit <a href="https://loginshield.com" rel="nofollow ugc">https://loginshield.com</a> to delete their LoginShield account.</p>


LoginShield for WordPress

LoginShield for WordPress is the secure and convenient way to login to your WordPress site. It's easy to use and protects users against password  …

Authentiq vs LoginShield for WordPress