gpaterno

A lot of web sites, even well known ones (newspapers, telcos, …) adopts 
WordPress as their CMS. WordPress is a great platform, however it 
can happen that password leaking or guessing might lead to unauthorized 
access to the platform. A potential attacker can be therefore able to 
change articles, part of the web site and/or make the website unavailable, 
with image and economic damages for a company or for a blogger. 
This is even more true if your website is not SSL protected.
SecurePass is a SaaS service offering an easy and affordable solution 
for One Time Passwords (OTP) and strong authentication in general. They 
offer 5 users for free included with their standard (=basic) account, which 
is more than enough for standard blogs and web sites. Companies can purchase 
additional users, if needed.
More information on the section “Setup and configure SecurePass” in Other Notes. 
To open a SecurePass account go to http://www.secure-pass.net/open
<h3>Setup and configure SecurePass</h3>
If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open
Note: Use “misec2011” as promo code, it will give you an entitlement for using 
SecurePass up to 10 users for 2 years free-of-charge. Without any promo code, 
you will have 5 users for 20 years for free. It depends on what you need (more users or more years).
Connect to the admin interface on https://admin.secure-pass.net 
and create a new device (basically a RADIUS client).
In the admin interface, go to the “Device” section and add a new device. 
You will need to set the public IP Address of the server, a fully qualified 
domain name (FQDN), and the secret password for the radius authentication. 
It’s ok if your web server is behind a firewall and/or NAT, ensure that 
your server has rights to send (and receive) RADIUS authentication requests, 
i.e. UDP port 1812.
<h3>Further reading</h3>
<ul>
<li>
This plugin web site: 
https://github.com/gpaterno/wp-securepass/
</li>
<li>
SecurePass web site: 
http://www.secure-pass.net/
</li>
<li>
UK on-line shop for SecurePass (they sell hardware tokens): 
http://shop.nervinesecurity.com/
</li>
</ul>

SecurePass authentication

This is a plugin to autheticate users through the SecurePass One Time Passwords service.

4login

Secure your site with a strong password — without the hassle of remembering it. 
With 4Login, you get simple yet powerful authentication that connects to an external server. 
Simply create your own pattern to generate a dynamic password that updates every 60 minutes.
Please refer to the <a href="https://www.4login.jp/" rel="nofollow ugc">operation Instructions </a> for instructions on how to use 4Login.
<h3>External services</h3>
This plugin connects to an external API to enable 4Login authentication. 
When logging in with 4Login, the plugin sends the 4Login App Service ID, the user’s email address, and a dynamic password . 
These credentials are entered directly within the WordPress login interface.
This authentication service is provided by Passlogy. 
For more information, please review our 
<a href="https://www.4login.jp/en/auto_terms/" rel="nofollow ugc">Terms of Service</a> and 
<a href="https://www.4login.jp/privacy-policy/?en=app" rel="nofollow ugc">Privacy Policy</a>.

4Login for Secure And Smart Access

4Login will give you an easy and powerful authentication (connect to an external server for authentication).

SecurePass authentication vs 4Login for Secure And Smart Access