WordPress.org

Usage

Preparation

1. Go to One-Time Password Settings
2. Enter and confirm a pass-phrase
3. Click the Generate button
4. Print the generated one-time password list (the button is below the list)

For security reasons generate a one-time password list in a trustworthy environment only.

For security reasons do not print the one-time password list with the url of your weblog in the header.

FireFox and Internet Explorer: you can change this using the menu File / Page Setup.

Login

1. Enter your user name as usual
2. Go to the password box
3. Wait until the challenge is displayed below the password field
4. Use the sequence number in the challenge to look up a one-time password on your printed list
5. Enter either the hex or words representation of the looked-up one-time password

The screens shots show how to look-up a one-time password.

Note that:

• You can always login with your main WordPress password too
• You could use a one-time password generator on your mobile phone, see the faq for some links
• You could enable protection of all WordPress administrative actions by one-time passwords

Known Problems

• Updating your WordPress user profile requires another click on the Update Profile button (cause unknown)
• Page refreshes of protected administrative actions will be disapproved (more a feature)
• No authorization is asked if an administrative page has not finished loading. However, the server will still check and disapprove the authorization.

Acknowledgments

This plugin uses:

• PHP One-Time Passwords class by Tomas Mrozek and published under the GNU Lesser General Public License version 3. The readme.txt file of this class contains useful information, for example a list of applications to compute one-time passwords.

• jQuery JavaScript Library published under both the GNU General Public License and MIT License

• jqPrint jQuery plugin by tanathos and published under both the GNU General Public License and MIT License

• URL Utils jQuery plugin by Ben Alman and published under the MIT License

• SimpleModal jQuery plugin by Eric Martin and published both under the GNU General Public License and the MIT License

All licenses are GPL-Compatible Free Software Licenses.