gpaterno

<p>A lot of web sites, even well known ones (newspapers, telcos, …) adopts<br />
WordPress as their CMS. WordPress is a great platform, however it<br />
can happen that password leaking or guessing might lead to unauthorized<br />
access to the platform. A potential attacker can be therefore able to<br />
change articles, part of the web site and/or make the website unavailable,<br />
with image and economic damages for a company or for a blogger.<br />
This is even more true if your website is not SSL protected.</p>
<p>SecurePass is a SaaS service offering an easy and affordable solution<br />
for One Time Passwords (OTP) and strong authentication in general. They<br />
offer 5 users for free included with their standard (=basic) account, which<br />
is more than enough for standard blogs and web sites. Companies can purchase<br />
additional users, if needed.</p>
<p>More information on the section “Setup and configure SecurePass” in Other Notes.<br />
To open a SecurePass account go to http://www.secure-pass.net/open</p>
<h3>Setup and configure SecurePass</h3>
<p>If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open</p>
<p>Note: Use “misec2011” as promo code, it will give you an entitlement for using<br />
SecurePass up to 10 users for 2 years free-of-charge. Without any promo code,<br />
you will have 5 users for 20 years for free. It depends on what you need (more users or more years).</p>
<p>Connect to the admin interface on https://admin.secure-pass.net<br />
and create a new device (basically a RADIUS client).</p>
<p>In the admin interface, go to the “Device” section and add a new device.<br />
You will need to set the public IP Address of the server, a fully qualified<br />
domain name (FQDN), and the secret password for the radius authentication.<br />
It’s ok if your web server is behind a firewall and/or NAT, ensure that<br />
your server has rights to send (and receive) RADIUS authentication requests,<br />
i.e. UDP port 1812.</p>
<h3>Further reading</h3>
<ul>
<li>
<p>This plugin web site:<br />
https://github.com/gpaterno/wp-securepass/</p>
</li>
<li>
<p>SecurePass web site:<br />
http://www.secure-pass.net/</p>
</li>
<li>
<p>UK on-line shop for SecurePass (they sell hardware tokens):<br />
http://shop.nervinesecurity.com/</p>
</li>
</ul>


SecurePass authentication

This is a plugin to autheticate users through the SecurePass One Time Passwords service.

Marco Gargano

<p>Protect pages and posts with email-delivered verification codes. Secure, passwordless access control with user management and customization.</p>
<h3>✅ Features</h3>
<p>One Time Email Access Guard <strong>protects your WordPress pages and posts</strong> using email-delivered verification codes. Each authorized user receives a time-limited code, allowing secure access without traditional passwords.</p>
<ul>
<li><strong>Email-Based Verification</strong>: Send secure verification codes via email</li>
<li><strong>User Management</strong>: Create and manage authorized users with contact details</li>
<li><strong>Content Protection</strong>: Enable protection per page/post with user assignment</li>
<li><strong>Customizable Access</strong>: Set custom access duration and expiration dates</li>
<li><strong>Modal Customization</strong>: Customize colors, opacity, and appearance</li>
<li><strong>Protected Content Tracking</strong>: Monitor all protected pages and authorized users</li>
<li><strong>Secure Cookies</strong>: Maintain login sessions with secure access tokens</li>
</ul>
<p><strong><a href="https://access-guard.github.io/" rel="nofollow ugc">👉👉👉 Visit the official page 👈👈👈</a></strong></p>
<h3>😌 Easy to use</h3>
<ol>
<li><strong>Create user</strong> under Access Guard</li>
<li><strong>Activate user</strong> in the page/post page</li>
</ol>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/XE4d496uPUc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>🛡️ Secure</h3>
<p><strong>🪜 Up to 3 security levels available</strong></p>
<p>Configurable in settings:<br />
1️⃣ <strong>Phone number</strong> – Required ✦✧✧<br />
Two-factor authentication: enter your phone number to receive a code by email<br />
2️⃣ <strong>First name</strong> – Optional ✦✦✧<br />
Three-factor authentication: phone number + first namenome<br />
3️⃣ <strong>Last name</strong> – Optional ✦✦✦<br />
Multi-factor authentication: phone number + first name + last name</p>
<h3>🧰 All Features</h3>
<h4>🔐 Advanced Security</h4>
<ul>
<li>Passwordless access via email verification codes</li>
<li>Email based One Time Password (OTP) access</li>
<li>User verification with name and phone number</li>
<li>Verification codes expire after 15 minutes</li>
<li>Secure access tokens via cookies</li>
<li>International phone support (195+ countries)</li>
</ul>
<h4>🎨 Fully Customizable</h4>
<ul>
<li>Custom modal colors (overlay, background, text)</li>
<li>Adjustable opacity and shadow</li>
<li>Custom titles and messages</li>
<li>Professional HTML email templates</li>
</ul>
<h4>👥 User Management</h4>
<ul>
<li>Create users with name, email, and phone</li>
<li>Enable/disable users instantly with toggle switch</li>
<li>Custom access duration (15 min to unlimited)</li>
<li>Optional expiration date and time</li>
<li>User status indicator with visual feedback</li>
<li>Bulk operations (activate/deactivate all users)</li>
<li>Bulk expiry date setting</li>
<li>CSV import/export for user data</li>
</ul>
<h4>🔒 Content Protection</h4>
<ul>
<li>Enable protection per page/post</li>
<li>Assign authorized users with multi-select</li>
<li>Protection status column in admin</li>
<li>Real-time user status display (active/expired)</li>
<li>Quick edit access from protected pages list</li>
</ul>
<h4>📊 Monitoring</h4>
<ul>
<li>View all protected pages/posts</li>
<li>See authorized users</li>
<li>Direct quick-edit access</li>
</ul>
<h4>⚙️ Flexible Configuration</h4>
<ul>
<li>Optional first name and last name fields</li>
<li>Custom blocked-content messages</li>
<li>Modal color customization (overlay, background, text)</li>
<li>Adjustable overlay opacity</li>
<li>Toggle modal shadow effects</li>
<li>Reset all settings to default</li>
</ul>


One Time Email Access Guard

Protect pages and posts with email-delivered verification codes. Secure, passwordless access control with user management and customization.

SecurePass authentication vs One Time Email Access Guard