Token2 Hardware Tokens

The Token2 Hardware Tokens plugin for WordPress gives you two-factor authentication using the Token2 Hardware Tokens .

The two-factor authentication requirement can be enabled on a per-user basis by administrators.

1. Make sure your webhost is capable of providing accurate time information for PHP/WordPress, ie. make sure a NTP daemon is running on the server.
2. Install and activate the plugin.
3. Enter a description on the Users -> Profile and Personal options page, in the Token2 Hardware Tokens section.
4. Scan the generated QR code with your phone, or enter the secret manually, please note that Token2 hardware tokens are based on TOTP.
   You may also want to write down the secret on a piece of paper and store it in a safe place.
5. Remember to hit the Update profile button at the bottom of the page before leaving the Personal options page.
6. That’s it, your WordPress blog is now a little more secure.

Installation Instructions

1. Make sure your webhost is capable of providing accurate time information for PHP/WordPress, ie. make sure a NTP daemon is running on the server.
2. Install and activate the plugin.
3. Enter a description on the Users -> Profile and Personal options page, in the Token2 Hardware Tokens section.
4. Scan the generated QR code with your phone, or enter the secret manually, please note that Token2 hardware tokens are based on TOTP.
   You may also want to write down the secret on a piece of paper and store it in a safe place.
5. Remember to hit the Update profile button at the bottom of the page before leaving the Personal options page.
6. That’s it, your WordPress blog is now a little more secure.

Which hardware tokens this plugin supports?

The plugin is designed primarily to support Token2 hardware tokens, available here:https://token2.com/?content=hwtokens. A few other token models are supported as well. Feel free to contact us for more details : https://token2.com/contact.

I have several users on my WordPress installation, is that a supported configuration ?

Yes, each user has his own Token2 Hardware Tokens settings.

During installation I forgot the thing about making sure my webhost is capable of providing accurate time information, I’m now unable to login, please help.

If you have SSH or FTP access to your webhosting account, you can manually delete the plugin from your WordPress installation,
just delete the wp-content/plugins/token2-hwtokens directory, and you’ll be able to login using username/password again.

1. 

   Token2 Hardware Tokens section on the Profile and Personal options page.

2. 

   The login form with second factor field.

0.01

First version