Yubico Forum
https://forum.yubico.com/

Yubikey with Wordpress Plugin
https://forum.yubico.com/viewtopic.php?f=8&t=648
Page 1 of 1

Author:  pickledhamster [ Tue Mar 08, 2011 11:32 pm ]
Post subject:  Yubikey with Wordpress Plugin

I've just received my yubikey in the mail. I installed the plugin on my Wordpress self-hosted blog and everything is working great.

Do we have the facility to order a spare Yubikey with the same setup in case the first is lost?

For Wordpress, if i was to lose the Yubikey would i be able to bypass it by simply removing the Yubikey directory from my plugins folder?

Cheers.

Author:  Redhatter [ Sun Mar 13, 2011 10:44 am ]
Post subject:  Re: Yubikey with Wordpress Plugin

From memory, I think the WordPress plug-in still permits password authentication even when you configure it with a YubiKey. So if you lost the YubiKey, you just need to remember your password to get back in. That said, worst case is you can move the plug-in directory to disable it, then in your database:

Code:
SELECT user_id FROM wp_users WHERE user_login='your_login';
DELETE FROM wp_usermeta WHERE user_id=your_id AND meta_key LIKE 'yubikey%';


I set up the YubiKey plug-in on my blog initially, but then when I got OpenID going with two-factor authentication, I decided to disable YubiKey authentication on my user login and use OpenID instead. Rather, I use password authentication when I'm at home (and thus, only 100Mbps Ethernet between me and server), and the YubiKey via OpenID when I'm outside the home network.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/