Description
RapID Secure Login (RapID-SL) is a simple and convenient authentication plugin without passwords.
Enjoy hassle-free and secure user login to WordPress websites and blogs. RapID-SL combines simplicity with a great user experience, removing the need for vulnerable and inconvenient usernames and passwords.
Benefits
- 2FA from your phone with unrivalled ease of use.
- Up and running in a couple of minutes.
- No reliance on an external authentication service.
- Doesn’t use vulnerable and clumsy SMS one-time passwords.
- Use multiple phones as a backup.
- Simple “scan and fingerprint” interface – no need to type anything.
- Fast sign-up to blogs and websites.
Features
- Easy log-in with your phone: simply scan a QR code using your phone, then provide a fingerprint or PIN – never need personal details or passwords again.
- Enterprise-grade cybersecurity technology, using 2048-bit cryptography, trusted by governments and corporations worldwide.
- Direct mobile browser login too – just tap the QR code.
- Easy install: no coding or special knowledge required.
- Customized logon screens supported via simple WordPress “shortcodes”.
- Automatic login to multiple accounts on multiple sites from multiple devices with a single app.
Service Platform Requirements
- Minimum WordPress version: 4.5
- Minimum PHP version: 5.2.4
- Minimum OpenSSL version: 1.0.2
Installation
- Install the plugin directly through the WordPress add plugins admin page.
- Install the RapID Secure Login app on your phone.
- Use the app to scan the QR Code in the RapID Secure Login Plugin Settings Page.
- Follow the instructions in the app to create a RapID account.
Once registered, you can use your phone to log in to your WordPress site and to administer your account through the RapID dashboard
Your site must have correctly configured support for OpenSSL. Please check with your hosting service provider if you are unsure.
If your WordPress site uses self-signed certificates to support https (during local development for example), it will not be possible to configure the site correctly, as the plugin will not be able to trust the endpoint where the certificates will be uploaded. The solution is to use a properly trusted certificate from a recognised certificate authority.
If your website uses a “privacy mode” or basic authentication to protect the WordPress administration area in addition to the normal WordPress login mechanism, it will not be possible for the plugin to configure the site correctly. The “privacy mode” or basic authentication will need to be turned off.
FAQ
-
Can I log in to more than one account for each site?
-
Yes – when the RapID Secure Login app sees that you have more than one credential on your phone for the site, it lets you choose the one you want.
-
What happens if I lose or change my phone?
-
It is important that you keep a record of your original password, or that you are able to request an administrator reset from the sites you register with.
You can also have the app on more than one phone of course! Then you can log in again and re-register with your new phone.
-
Can I still log in if the RapID service goes down?
-
Yes – the RapID Service is only used for creating your user credentials when you enrol. At the point of authentication, all messages are purely between the app and the WordPress site.
-
Yes – just log in to your account, edit your WordPress profile and you can remove enrolled phones from your account. The site administrator can also do this on your behalf.
-
Does RapID know my passwords or user ID?
-
No – RapID works independently of your passwords and user ID. You can change those and lock them away off-line!
When you create a RapID credential for your phone, the plugin internally generates a random unique identifier, which it associates with your WordPress ID. This random ID is the only WordPress account information the RapID app or service needs. Your actual ID and password are never sent outside your WordPress site.
-
What does the service cost?
-
Your first 1000 licenses are absolutely free. After that, it is just $50 for every 5000 licenses each year. No catches, no extra fees, just a secure WordPress login for all of your users, at a price that won’t break the bank. Additional licenses can be purchased through the RapID web site.
-
Where can I get technical assistance?
-
The RapID Secure Login Web site and Support Forum helps you to find answers to technical questions and lets site administrators post enquiries and comments.
Reviews
Contributors & Developers
“RapID Secure Login” is open source software. The following people have contributed to this plugin.
Contributors
“RapID Secure Login” has been translated into 2 locales. Thank you to the translators for their contributions.
Translate “RapID Secure Login” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.0.15
- Tested up to WordPress version 5.7.
2.0.14
- Added Role filter for emailed invitations.
- Tested up to WordPress version 5.3.
2.0.13
- Minor change to avoid PHP 7 warning.
- Tested up to WordPress version 5.2.
2.0.12
- Support for direct enrolment.
- Minor bug fixes.
2.0.11
- Minor bug fixes.
2.0.10
- Minor bug fixes.
- Enhanced animated QR code.
2.0.9
- Minor bug fixes.
2.0.8
- Roles implemented.
- Improved front end registration and settings page.
- Improved error handling.
- Minor bug fixes.
2.0.7
- Streamlined Sign up.
- Increased resiliency in processes.
- Minor bug fixes.
2.0.6
- Session bug fixes.
- Minor bug fixes.
2.0.5
- Credential storage update.
- Security fixes.
- Minor bug fixes.
2.0.4
- QR Code image optimisation.
- QR Code refreshing.
- Minor bug fixes.
2.0.3
- Updated readme.txt
2.0.2
- Improved upgrade path to not remove files before upgrade.
- Improved error handling for ajax pollers.
2.0.1
- Updated information on plugin settings page.
- Updated readme.txt.
- Minor bug fixes for front end registration and browser compatibility.
2.0.0
- Ajax entry points naming standardized
- Migrate to JSON Ajax data throughout
- File-based polling check to avoid full stack load