Google Authenticator display

  • Resolved Tom

    (@edge22)


    7 years, 7 months ago

    Great plugin!

    I do have a question though – why not include Google Authenticator once the correct username and password are entered in a “step 2” sort of scenario.

    Right now, the field displays all the time, even if the user doesn’t have it enabled.

    I don’t know about others, but I would prefer if it was in a next step sort of scenario.

    Any reason for this?

    Also, is there an option planned for failed login attempts? Like banning an IP for x minutes after 5 failed login attempts?

    Thanks for the awesome plugin, keep up the great work 🙂

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author Paul

    (@paultgoodchild)

    7 years, 7 months ago

    Hey Tom, thanks for the nice feedback on the plugin.

    With regards the Google Authenticator field, we may enhance this experience further, but it’s likely going to come in a future premium version. You ask if there was a reason, and it’s down to the work involved to put that sort of thing in place… not as trivial as it may first appear.

    With regards the failed login attempts, we have that and much more extensive than examining logins. It’s part of the automatic IP black list system:
    https://www.icontrolwp.com/blog/wordpress-security-plugin-update-automatically-block-malicious-visitors/

    Hope this helps.

    • This reply was modified 7 years, 7 months ago by Paul. Reason: fix link
    Thread Starter Tom

    (@edge22)

    7 years, 7 months ago

    Thanks for the quick reply, Paul – appreciate it.

    It’s tough, because I almost think having the GA field on the initial login form is a good idea – if the offender guesses the right password, they won’t know it as the GA field will fail anyways.

    However, I think it’s a better user experience to have it on a separate page for users who have enabled it.

    Either way, I’m sure you’ll come up with a great solution.

    Looking forward to the premium version – just don’t go too crazy with licensing 🙂

    Thanks!

    Thread Starter Tom

    (@edge22)

    7 years, 7 months ago

    It would be nice if you could apply a filter to this text:

    Google Authenticator Code [?]
(Use only if setup on your account)

    Currently, I can’t change it all, and the text in the brackets isn’t even translatable.

    I’m just trying to remove the question mark and link along with it, and it isn’t possible.

    Plugin Author Paul

    (@paultgoodchild)

    7 years, 7 months ago

    In the next minor iterative release that text will be translatable and you’ll be able to use CSS to turn off display some of those elements. You’ll have a bit more control of that…

    Thread Starter Tom

    (@edge22)

    7 years, 7 months ago

    Perfect, that’ll help a lot.

    Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Google Authenticator display’ is closed to new replies.