Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi

    Any plans to implement simple Two Factor Authentication?

    Yes, this will be added soon. You can read more about it in the following support thread.

    Plugin Protection would be great as well like Shield Plugin does.

    Please check the following documentation. Is this what you mean.

    Regards

    Thread Starter dompauling

    (@dompauling)

    Yes, this will be added soon. You can read more about it in the following support thread.

    I don’t mean captcha. I am thinking of Phone/SMS/Google Authenticator/Authy…

    Please check the following documentation. Is this what you mean.

    No, what I mean is e.g. the plugin is locked and there is an option to set an authentication key that unlocks it.

    Only administrators that know the authentication key can view/change plugin settings and deactivate/uninstall the plugin.

    This adds a second layer, that is independent from WordPress.

    Imagine some bad guy manages to find a way into our admin dashboard.
    Without the second layer he can just turn off all options in AIOWPSF.
    Like the option for DISALLOW_FILE_EDIT, which is supposed to prevent intruders from inserting and executing malicious code through the theme- and plugin-editor in the dashboard.
    Bad guy turns off this option and goes on with his evil work.
    Not so with a plugin protection mechanism ??

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    I don’t mean captcha. I am thinking of Phone/SMS/Google Authenticator/Authy…

    I am sorry but I pasted the wrong link ?? The developers do have this in the to do list. However there is no time frame when it will be available.

    No, what I mean is e.g. the plugin is locked and there is an option to set an authentication key that unlocks it.

    Only administrators that know the authentication key can view/change plugin settings and deactivate/uninstall the plugin.

    Currently only administrators can make changes to the security plugin. So what you are after is another layer of security apart from the fact that only admins can make changes to the plugin, is this correct?

    Regards

    Thread Starter dompauling

    (@dompauling)

    The developers do have this in the to do list. However there is no time frame when it will be available.

    OK cool. Looking forward to it! Meanwhile I will use a separate plugin for this.

    So what you are after is another layer of security apart from the fact that only admins can make changes to the plugin, is this correct?

    Yes, wouldn’t that be a cool feature?!
    Read the link I posted. It describes it pretty well ??

    Thanks and regards!

    • This reply was modified 5 years, 6 months ago by dompauling.
Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Two Factor Authentication?’ is closed to new replies.