Rating: 5 stars

works like a charm with the latest version of wordpress.
Easy to configure.

Rating: 5 stars

Works great with WordPress 4.8 + Yubikey 4 and Yubikey 4 Nano. Thanks a lot !

Rating: 5 stars

perfect – thank You

Rating: 5 stars

easy to use, very secure. Thanks a lot!

Rating: 5 stars

Thank you for the plugin!

Please add to the documentation that the user have to install the following libs:

sudo apt-get install php5-mcrypt php5-curl php5-gd

Best regards
Robert

Rating: 5 stars

Even though the plugin has not been updated in years, it works like a charm.

Rating: 5 stars

I love Yubico and was pleasantly surprised that this plugin existed!

The plugin works just as you expected and you can save up to three keys for each user which is a nice touch.

Rating: 5 stars

function yubikey_verify_otp($otp,$yubico_api_id,$yubico_api_key){
	<strong>$url="https://api.yubico.com/wsapi/verify?id=".$yubico_api_id."&otp=".$otp;</strong>

	$ch = curl_init($url);
	curl_setopt($ch, CURLOPT_USERAGENT, "Wordpress Yubikey OTP login plugin");
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	$response = trim(curl_exec($ch));
	curl_close($ch);

	if (yubikey_verify_hmac($response,$yubico_api_key)) {
		if(!preg_match("/status=([a-zA-Z0-9_]+)/", $response, $result)) {
			return false;
		}
		<strong>if ($result[1]=='OK') {</strong>
			return true;
		}
	}
	return false;
}

An

• unencrypted
• unauthenticated
• unsigned

response of “OK” is what users should base security assumptions on?
C’mon.

Rating: 5 stars

I’m not able to figure out how to use a custom val-server. I have changed the verifier address in yubikey.php and I have all the neccessary info (API key and ID’s) for the user. But the plugin doesn’t attempt to communicate with the server.

Any help would be appreciated.

Rating: 3 stars

Hi Henrik

Thanks for your work! Your plugin works great.

However, would’t it be better to call the Yubico API via HTTPS?

Rating: 5 stars

I have had Yubikey (old version) for a years and not used it much. Mainly I used it as a OpenID authentication on many sites. WordPress does support OpenID authentication but it works much better with this plugin.
Thank you for doing it!