gpaterno

<p>A lot of web sites, even well known ones (newspapers, telcos, …) adopts<br />
WordPress as their CMS. WordPress is a great platform, however it<br />
can happen that password leaking or guessing might lead to unauthorized<br />
access to the platform. A potential attacker can be therefore able to<br />
change articles, part of the web site and/or make the website unavailable,<br />
with image and economic damages for a company or for a blogger.<br />
This is even more true if your website is not SSL protected.</p>
<p>SecurePass is a SaaS service offering an easy and affordable solution<br />
for One Time Passwords (OTP) and strong authentication in general. They<br />
offer 5 users for free included with their standard (=basic) account, which<br />
is more than enough for standard blogs and web sites. Companies can purchase<br />
additional users, if needed.</p>
<p>More information on the section “Setup and configure SecurePass” in Other Notes.<br />
To open a SecurePass account go to http://www.secure-pass.net/open</p>
<h3>Setup and configure SecurePass</h3>
<p>If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open</p>
<p>Note: Use “misec2011” as promo code, it will give you an entitlement for using<br />
SecurePass up to 10 users for 2 years free-of-charge. Without any promo code,<br />
you will have 5 users for 20 years for free. It depends on what you need (more users or more years).</p>
<p>Connect to the admin interface on https://admin.secure-pass.net<br />
and create a new device (basically a RADIUS client).</p>
<p>In the admin interface, go to the “Device” section and add a new device.<br />
You will need to set the public IP Address of the server, a fully qualified<br />
domain name (FQDN), and the secret password for the radius authentication.<br />
It’s ok if your web server is behind a firewall and/or NAT, ensure that<br />
your server has rights to send (and receive) RADIUS authentication requests,<br />
i.e. UDP port 1812.</p>
<h3>Further reading</h3>
<ul>
<li>
<p>This plugin web site:<br />
https://github.com/gpaterno/wp-securepass/</p>
</li>
<li>
<p>SecurePass web site:<br />
http://www.secure-pass.net/</p>
</li>
<li>
<p>UK on-line shop for SecurePass (they sell hardware tokens):<br />
http://shop.nervinesecurity.com/</p>
</li>
</ul>


SecurePass authentication

This is a plugin to autheticate users through the SecurePass One Time Passwords service.

Passlogy

<p>You need strong password to protect your site. However, how do you remember it or is it really strong?<br />
“PassClip Auth” provides really strong password that is also easy to remember.<br />
Once you make your “pattern”, you can get your password using “PassClip”. And the password will change every 30 seconds(at the shortest).</p>
<h4>Get and sign up for PassClip</h4>
<ol>
<li>Go to <a href="https://www.passclip.com/" rel="nofollow ugc">the page about PassClip</a> and install PassClip on your smart phone.</li>
<li>Activate your PassClip by registering your “pattern” and email address.</li>
</ol>
<h4>Sign up for PassClip Auth(PCA)</h4>
<ol>
<li>Input PassClip Code “paauth” in your PassClip. That makes a new slot in your PassClip.</li>
<li>Go to <a href="https://member.passclip.com/member/ui/" rel="nofollow ugc">PassClip Auth member’s page</a> and log in with your email address and password which the slot shows you.</li>
<li>Make your “PassClip Code”. And then you get your “PassClip Auth app service id(PCA app service id)”. You need both “code” and “id” to use this plugin.</li>
</ol>
<h4>How to apply PassClip Auth to your site</h4>
<ol>
<li>Install and activate this plugin to your WordPress.</li>
<li>Go to PassClip Auth Options Setting from the menu.</li>
<li>Input the PassClip Auth app service id(PCA app service id), PassClip Code and other items in the setting page and click the “Save Change” button.</li>
</ol>
<h4>How to log in to WordPress site with PassClip Auth</h4>
<ol>
<li>Users register PassClip Code of your site in their PassClip. That makes a new slot to get password to log in to your site.</li>
<li>Show the password in PassClip (tap the new slot).</li>
<li>In login form of your site, users enter email address and password in the slot. (<strong>Users do not need general WordPress password.</strong>)</li>
<li>Click the “Log in” button.</li>
</ol>


PassClip Auth for WordPress

"PassClip Auth" provides strong and easy authentication. "PassClip Auth for WordPress" is the plugin to launch PassClip Auth to Wo …

SecurePass authentication vs PassClip Auth for WordPress