Yubico Forum

Hi Henrik,

OK so I've gotten my yubikey, installed the plug-in, configured the options, and user.
One question I have... Shouldn't the user by able to login without having to enter userid and password.
It kind of makes not point if I can login with those credentials and supersede the yubikey.

Perhaps I'm missing something.
Thanks in advance,

Bill

Hi Henrik,

thanks for this great work!
As Bill I received my Yubikey and installed your great plugin with WP2.7.1 - it works like a charme.

One question to your clean code:
In line 272 you are calling api.yubico.com with the http protocol. I know we are working with OTPs but would it make sense to call the api via https? Maybe I am a little bit to paranoid

If you are interested in I could translate it into the german language. Feel free to contact me.

@Bill: As I undestood the plugin adds the OTP so you have a two-factor authentication. The OTP alone will not work.


/Jens

I have created the german language files. You just need to copy the unzipped files into the plugin folder.
Feel free to contact me if there is something to improve.

/Jens

Here is a detailed visual guide on setting up Wordpress two factor authentication with Yubikey by using this plugin:

WordPress two-factor authentication with low-cost YubiKey USB token
http://www.net-security.org/article.php?id=1248

I'm having trouble with wordpress 2.9.1
The login form complains about the empty password field.

Bye

I've been using this plugin for awhile and it worked great. However, recently I have gotten an Android phone and wanted to start using the WordPress app. One issue that I'm having is that with this plugin installed the WordPress app won't work. Obviously there is no way for me to plugin the YubiKey into my phone, and the WordPress app doesn't give any option to enter in the additional OTP anyways. I'm curious if there is somehow a way to detect the attempt by the WordPress app and allow authentication without the use of the OTP? I don't want to weaken the added security that the plugin provides, but I find myself having to run without the YubiKey plugin in order to use the WordPress app.