Passe al contignût
  • A proposit di Wordpress
    • A proposit di Wordpress
    • WordPress.org
    • Documentazion
    • Support
    • Feedback
  • Jentre
  • Registriti
WordPress.org
WordPress.org

Friulian

  • Temas
  • Plugin
  • News
  • About
  • Contat
  • Get WordPress
Get WordPress

Plugins

  • My Favorites
  • Beta Testing
  • Developers

This plugin hasn’t been tested with the latest 3 major releases of WordPress. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.

Download

yubikey-plugin

By Adam Lyons
  • Details
  • Reviews
  • Installation
  • Support
  • Development

Description

This is a plugin for WordPress that provides multifactor authentication with one-time passwords using the Yubikey USB token.
The plugin uses the Yubico Web service API in the authentication process.
The one-time password requirement can be enabled on a per user basis.

Screenshots

  • Entering Key ID on the profile page
  • Entering Yubico ID & API key on Yubikey options page.
  • The enhanced loginbox.
  • The Yubikey itself.

Installation

  1. Buy a Yubikey
  2. Create a Yubico ID & API Key
  3. Unzip plugin into your /wp-content/plugins/ directory.
  4. Enter Key ID on the Users -> Profile and Personal options page.
  5. Enter Yubico ID & API key on the Settings -> Yubikey options page.
    Id/key confused ? Well the Key ID is the first 12 chars from the output Your Yubikey generates,
    they don’t change, the Yubico ID and API Key is used when communicating with the Yubico authentication server.

FAQ

How much does the Yubikey cost ?

A single Yubikey is $40

Are there any special requirements for my WordPress/PHP installation ?

PHP5 with Hash & Curl libs enabled.

I have a lot of users on my WordPress installation, do they all need Yubikeys ?

No the plugin can be enabled on a per user basis.

Reviews

Love that I can use my YubiKey on WP

idowebwork Avrîl 3, 2020
Thanks for an amazing plugin. Hopefully the maintainer is looking and will update things to show they are tested as working with WP 5.4, since it does.

Working perfect with version 5.3.2

kose Fevrâr 29, 2020
So nice to have the possibility of adding an extra layer of security to WordPress admin panel. Plugins is working perfect with version 5.3.2. I encountered some semantic issues, thus, using in WordPress "Yubico API ID and Yubico API key" vs "Client ID and Secret Key" on Yubico's site, not important.

Simple and flawless operation

pabstm Fevrâr 6, 2019
Exactly what I was looking for. Just install, activate it and get/insert an API Key (which can be obtained in seconds). Subsequently every user can manage the Yubikey-Settings right in the profile. Nothing more, Nothing less.

Couldn’t get it to work

dhoogmoed Dicembar 15, 2018
WP 5. and a Fairly old Yubikey. Installation and API activation worked without hassle but when entering the OTP on the login page it just fails to grant access. No obvious errors. I have no time to trouble shoot, so will look for an alternative 2fa.

Additional security for WordPress

M. van Dam Dicembar 30, 2017
I love WordPress for it's simplicity to use and it's rich eco-system to achieve complex challenges, but always felt that a simple username and password combination was not enough to elevate the security of WordPress. Now with this Yubikey-Plugin, I'm finally able to add an additional factor to safeguard against unauthorised access. Many thanks to Adam Lyons for making this plugin available. It's really easy to set up and to activate 2FA per user account. I also notified Yubico to update their WordPress plugin link to this plugin.

Does what it has to do

codedead Novembar 7, 2017
This plugin does exactly what it's supposed to do. Yubikey support has been added and it seems to be pretty secure as well (I hope). Let's hope for continued updates and compatibility for the latest Wordpress versions. Thank you for your hard work for creating this plugin!
Read all 6 reviews

Contributors & Developers

“yubikey-plugin” is open source software. The following people have contributed to this plugin.

Contributors
  • Henrik Schack

Translate “yubikey-plugin” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

2.3

Yubi API Version 2 Implemented

2.2

Darn SVN messing me up

2.1

Working with more recent API from YubiKey

0.96

Some depricated stuff removed.
Tab index on login page remove.

0.95

API key URL updated

0.94

  • Version mess fixed

0.93

  • Styling on descriptions added, once again thanks to Uwe Moosheimer

0.92

  • German translation by Uwe Moosheimer added

0.91

  • Tab index fix on registration page

0.90

  • Support for multiple Yubikeys per account.
  • Tested with WordPress 3.1.1

0.82

  • Russian translation contributed by M. Comfi http://www.comfi.com/

0.81

  • WordPress global var $is_profile_page has been changed into a constant
  • IS_PROFILE_PAGE. Thanks to Koen Vervloesem for reporting this.

0.80

  • More multiuser friendly version. Now, a Yubikey can be registered during
  • registration. An Administr’ator can disable the OTP requirement for other users

0.71

  • Initial release

Meta

  • Version: 2.3
  • Last updated: 3 agns ago
  • Active installations: 600+
  • WordPress Version: 3.8 or higher
  • Language:
    English (US)
  • Tags:
    authenticationloginpasswordsecurityyubikey
  • Advanced View

Ratings

See all
  • 5 stars 5
  • 4 stars 0
  • 3 stars 0
  • 2 stars 0
  • 1 star 1
Log in to submit a review.

Contributors

  • Henrik Schack

Support

Issues resolved in last two months:

0 out of 1

View support forum

  • About
  • News
  • Hosting
  • Donate
  • Support
  • Developers
  • Get Involved
  • Learn
  • Showcase
  • Plugins
  • Themes
  • Patterns
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • Privacy
  • Public Code
WordPress.org
WordPress.org

Friulian

  • Visit our Facebook page
  • Visit our Twitter account
Il codiç al é puisie.