WordPress.org

Plugin Directory

Clef Two-Factor Authentication

Secure two-factor that people love to use: strong authentication without passwords or tokens; single sign on/off; magical user experience.

Clef provides easy-to-use strong two-factor authentication using smartphones. It replaces insecure passwords and cumbersome one-time codes with the beautiful Clef Wave.

To log in with Clef, simply open the mobile app and sync with the Clef Wave. Watch our 30-sec. demo.

Our Users’ Favorite Features

  • The “magical” Clef Wave: login securely without passwords, and enjoy two-factor protection without one-time codes.

  • Convenience: use your smartphone for strong authentication instead of a “third device” such as a USB drive or extra security key.

  • Single sign on/off: Sync with the Clef Wave once, then enjoy one-click sign ins for all subsequent sites. Also, you are automatically logged out when you’re done working.

Security Features

  • Strong authentication: Clef replaces passwords with highly secure two-factor logins using the tried-and-true RSA public-key cryptosystem.

    • Clef stores your encrypted private key on your phone rather than in a central database. Thus even in the unlikely event of a catastrophic security breach on Clef’s servers, your login credentials remain secure on your phone.
    • Every Clef login requires two identification factors: your phone and a fingerprint or PIN. So even if your phone is lost or stolen, you’ll be safe.
  • Comprehensive protection: Clef disables passwords for all three WordPress authentication vectors: Dashboard access, API access, and automatic password resets via email. Thus it protects against the full spectrum of password-based attacks:

    • brute-force and botnet login attacks
    • weak, reused, and recycled passwords
    • sending login credentials via an insecure (non-ssl) connection
    • password phishing attempts
    • account takeovers via email account breaches

Configuration Features

  • Flexible password settings

  • Shortcode support: insert Clef’s “login with your phone” button or the Clef Wave in any post, page, or text widget using the clef_render_login_button shortcode.

  • Standards-based compatibility: Clef’s WordPress plugin adheres to WordPress coding guidelines and is thus compatible with most mainstream plugins.

  • Internationalization and localization support: Arabic, Danish, Dutch, French, German, Greek, Japanese, Latvian, Portuguese, Russian, Spanish. More translations on the way. Help translate Clef into your language.

  • Multisite network support

  • Helpful documentation

  • Free email and chat support

Requires: 3.5 or higher
Compatible up to: 4.2.4
Last Updated: 2015-6-18
Active Installs: 500,000+

Ratings

4.8 out of 5 stars

Support

3 of 9 support threads in the last two months have been resolved.

Got something to say? Need help?

Compatibility

+
=
Not enough data

1 person says it works.
0 people say it's broken.

100,1,1 0,1,0
100,1,1
100,1,1
100,1,1
100,1,1
100,1,1
100,1,1 100,2,2
100,1,1
100,2,2 100,3,3
100,3,3 100,1,1 100,1,1
100,1,1
100,3,3 100,3,3
100,1,1 100,3,3 100,1,1
100,3,3
67,3,2
100,1,1
100,1,1
67,3,2
100,2,2 100,1,1
100,1,1