Title: SecurePass authentication Author: gpaterno Published: February 9, 2012 Last modified: February 9, 2012 --- Search plugins This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://s.w.org/plugins/geopattern-icon/wordpress-plugin-for-securepass.svg) # SecurePass authentication By [gpaterno](https://profiles.wordpress.org/gpaterno/) [Download](https://downloads.wordpress.org/plugin/wordpress-plugin-for-securepass.zip) * [Details](https://wordpress.org/plugins/wordpress-plugin-for-securepass/#description) * [Reviews](https://wordpress.org/plugins/wordpress-plugin-for-securepass/#reviews) * [Installation](https://wordpress.org/plugins/wordpress-plugin-for-securepass/#installation) * [Development](https://wordpress.org/plugins/wordpress-plugin-for-securepass/#developers) [Support](https://wordpress.org/support/plugin/wordpress-plugin-for-securepass/) ## Description A lot of web sites, even well known ones (newspapers, telcos, …) adopts WordPress as their CMS. WordPress is a great platform, however it can happen that password leaking or guessing might lead to unauthorized access to the platform. A potential attacker can be therefore able to change articles, part of the web site and/or make the website unavailable, with image and economic damages for a company or for a blogger. This is even more true if your website is not SSL protected. SecurePass is a SaaS service offering an easy and affordable solution for One Time Passwords (OTP) and strong authentication in general. They offer 5 users for free included with their standard (=basic) account, which is more than enough for standard blogs and web sites. Companies can purchase additional users, if needed. More information on the section “Setup and configure SecurePass” in Other Notes. To open a SecurePass account go to http://www.secure-pass.net/open ### Setup and configure SecurePass If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open Note: Use “misec2011” as promo code, it will give you an entitlement for using SecurePass up to 10 users for 2 years free-of-charge. Without any promo code, you will have 5 users for 20 years for free. It depends on what you need (more users or more years). Connect to the admin interface on https://admin.secure-pass.net and create a new device (basically a RADIUS client). In the admin interface, go to the “Device” section and add a new device. You will need to set the public IP Address of the server, a fully qualified domain name ( FQDN), and the secret password for the radius authentication. It’s ok if your web server is behind a firewall and/or NAT, ensure that your server has rights to send( and receive) RADIUS authentication requests, i.e. UDP port 1812. ### Further reading * This plugin web site: https://github.com/gpaterno/wp-securepass/ * SecurePass web site: http://www.secure-pass.net/ * UK on-line shop for SecurePass (they sell hardware tokens): http://shop.nervinesecurity. com/ ## Installation 1. Create a ‘wp-securepass’ directory in ‘/wp-content/plugins/’ 2. Copy ‘securepass.php’ and ‘radius.class.php’ in ‘/wp-content/plugins/wp-securepass/’ 3. Open the file ‘securepass.php’ and change the variable $radius_secret with your own secret as set in SecurePass admin 4. Create a local user that matches a user in SecurePass. Note: The admin user will be no longer checked locally. 5. Activate the plugin through the ‘Plugins’ menu in WordPress #### More information Edit the securepass.php file and change $radius_secret variable to reflect the secret password as specified in the “Device” specified in the SecurePass administration panel. The variable $radius_host contains the primary RADIUS server of SecurePass, located in Switzerland (Lugano). A secondary RADIUS is available in Italy (Milan), if you prefer this location change $radius_host to ‘radius2.secure-pass.net’. WARNING!!! Before activating this plugin, create an user in wordpress that matches a username in SecurePass and grant full administrative powers. This because the admin user will be no longer checked locally. In case you won’t be able to login anymore, a workaround is moving the securepass plugin directory to another directory name, ex: “mv securepass securepass.old”. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “SecurePass authentication” is open source software. The following people have contributed to this plugin. Contributors * [ gpaterno ](https://profiles.wordpress.org/gpaterno/) [Translate “SecurePass authentication” into your language.](https://translate.wordpress.org/projects/wp-plugins/wordpress-plugin-for-securepass) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wordpress-plugin-for-securepass/), check out the [SVN repository](https://plugins.svn.wordpress.org/wordpress-plugin-for-securepass/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wordpress-plugin-for-securepass/) by [RSS](https://plugins.trac.wordpress.org/log/wordpress-plugin-for-securepass/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 0.1 Initial code of the plugin ## Meta * Version **0.1** * Last updated **14 years ago** * Active installations **Fewer than 10** * WordPress version ** 3.0 or higher ** * Tested up to **3.3.2** * Tags * [otp](https://wordpress.org/plugins/tags/otp/)[security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/wordpress-plugin-for-securepass/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/wordpress-plugin-for-securepass/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wordpress-plugin-for-securepass/reviews/) ## Contributors * [ gpaterno ](https://profiles.wordpress.org/gpaterno/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wordpress-plugin-for-securepass/)