WordPress.org

Ready to get started?Download WordPress

Forums

Google Authenticator
[resolved] [future] WordPress App support (8 posts)

  1. dgw
    Member
    Posted 3 years ago #

    Are there any plans to support the WordPress apps in the future? Creating a second, password-only account for app use kind of defeats the purpose of putting the powerful accounts under Authenticator protection. I'd need the app account to have capabilities that should be restricted to an Authenticator-enabled administrator account.

    Is there a way to implement, say, application-specific passwords?

    Sorry if I don't make much sense. I'll come back and clarify next time I'm on a PC.

  2. Henrik Schack
    Member
    Plugin Author

    Posted 3 years ago #

    Hi

    I think I'll need to do some reading on how the WordPress login system is working.

    Are you thinking about something like what Google does with those 16 character app passwords ?

    Best regards
    Henrik Schack

  3. dgw
    Member
    Posted 3 years ago #

    Hi,

    With enough insight into the WP auth internals, almost anything is possible.

    I am indeed thinking of Google's 16-char app passcodes. It seems like a perfect fit for something like the WP Android/iOS apps, given that the user need only log in to them once.

    Thanks for the consideration! I already love the plugin; app-specific passcodes would make it ten times better. (Because I could have my security, and the convenience of an app on my phone. :-)

  4. Henrik Schack
    Member
    Plugin Author

    Posted 3 years ago #

    Hi
    I'm working on it now, but I'm a little short on time these days :-(

    Best regards
    Henrik Schack

  5. Henrik Schack
    Member
    Plugin Author

    Posted 3 years ago #

    Btw, would a single app password be enough, or do you have a lot of apps that needs access to your WordPress installation ?

    Best regards
    Henrik Schack

  6. dgw
    Member
    Posted 3 years ago #

    Don't worry about how long it takes. I don't have a desperate need. :) (Actually, I had to temporarily remove the app from my phone to free up internal memory.)

    One is fine. It can be (basically) an "API key" instead of an application-specific password.

    Do you have the plugin source up on GitHub or something like that? When I get some free development time, I'd love to work on it. Maybe I can implement multiple app-specific passwords on top of whatever you come up with for one.

  7. Henrik Schack
    Member
    Plugin Author

    Posted 3 years ago #

    Hi, I've made a small change allowing you to enable XMLRPC access with my plugin active.

    Best regards
    Henrik Schack

  8. Vegard Skjefstad
    Member
    Posted 2 years ago #

    Brilliant, thanks a lot for this change!

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic