2FA - Revision history

Maltfield: /* See Also */

2025-02-09T18:19:38Z

See Also

← Older revision		Revision as of 18:19, 9 February 2025
Line 113:		Line 113:
	# [[Wordpress]]		# [[Wordpress]]
	# [[OSE Server]]		# [[OSE Server]]
	# [~~MediaWiki 2FA Documentation~~ https://meta.wikimedia.org/wiki/Help:Two-factor_authentication]		# [https://meta.wikimedia.org/wiki/Help:Two-factor_authentication MediaWiki 2FA Documentation]

	[[Category:Software]]		[[Category:Software]]

2025-02-09T18:19:24Z

See Also

← Older revision		Revision as of 18:19, 9 February 2025
Line 113:		Line 113:
	# [[Wordpress]]		# [[Wordpress]]
	# [[OSE Server]]		# [[OSE Server]]
	# [https://meta.wikimedia.org/wiki/Help:Two-factor_authentication]		# [MediaWiki 2FA Documentation https://meta.wikimedia.org/wiki/Help:Two-factor_authentication]

	[[Category:Software]]		[[Category:Software]]

2025-02-09T18:19:08Z

See Also

← Older revision		Revision as of 18:19, 9 February 2025
Line 113:		Line 113:
	# [[Wordpress]]		# [[Wordpress]]
	# [[OSE Server]]		# [[OSE Server]]
	# [~~[ttps~~://meta.wikimedia.org/wiki/Help:Two-factor_authentication]		# [https://meta.wikimedia.org/wiki/Help:Two-factor_authentication]

	[[Category:Software]]		[[Category:Software]]

2025-02-09T18:18:55Z

See Also

← Older revision		Revision as of 18:18, 9 February 2025
Line 113:		Line 113:
	# [[Wordpress]]		# [[Wordpress]]
	# [[OSE Server]]		# [[OSE Server]]
			# [[ttps://meta.wikimedia.org/wiki/Help:Two-factor_authentication]

	[[Category:Software]]		[[Category:Software]]

2019-12-03T15:40:02Z

OpenVPN

← Older revision		Revision as of 15:40, 3 December 2019
Line 108:		Line 108:
	</pre>		</pre>

	For more information on how to setup 2FA keys for OpenVPN ~~customers~~, see [[VPN#Sysadmin:_How_to_grant_access_to_the_dev_VPN]]		For more information on how to setup 2FA keys for OSE Developers who want to use OpenVPN, see [[VPN#Sysadmin:_How_to_grant_access_to_the_dev_VPN]]

	==See Also==		==See Also==

2019-12-03T12:20:48Z

@@ Line 35: / Line 35: @@
 [[Wordpress]] uses the google-authenticator and 'google-authenticator-encourage-user-activation' plugins for 2FA. For more info, see [[Wordpress#2FA]]
 ==Quick Start Guide==
@@ Line 107: / Line 80: @@
 Of course, your backups should be encrypted. If you don't know how to make secure backups, it's probably best that you just make sure that your website has multiple users (with distinct phones running a TOTP app) set as admins.
 ==See Also==

2019-12-03T12:18:58Z

adding 2FA info for OpenVPN

@@ Line 30: / Line 30: @@
 # [[#Wordpress]]
 =Wordpress=
 [[Wordpress]] uses the google-authenticator and 'google-authenticator-encourage-user-activation' plugins for 2FA. For more info, see [[Wordpress#2FA]]
 ==Quick Start Guide==

2018-10-19T18:35:35Z

TOTP - Time-based One Time Password

← Older revision		Revision as of 18:35, 19 October 2018
Line 15:		Line 15:
	=TOTP - Time-based One Time Password=		=TOTP - Time-based One Time Password=

	~~The~~ best "something you have" authentication factor ~~is TOTP~~. The benefits are:		TOTP (time-based one time password) tokens are the best "something you have" authentication factor. The benefits are:

	# Does not require a communication channel between the device holding the private key & the server you're authenticating other than the initial sharing of the private key. (This eliminates the risk of someone intercepting the token. 2FA systems that send tokens to users in plaintext [ie: sms messages, emails, etc] should be entirely untrusted).		# Does not require a communication channel between the device holding the private key & the server you're authenticating other than the initial sharing of the private key. (This eliminates the risk of someone intercepting the token. 2FA systems that send tokens to users in plaintext [ie: sms messages, emails, etc] should be entirely untrusted).

2018-10-19T18:34:18Z

What if I lose the device holding my TOTP private keys?

← Older revision		Revision as of 18:34, 19 October 2018
Line 73:		Line 73:

	# The QR code you scanned is your private key. You could take a screenshot of this QR code, print a copy of it, and keep it locked in a safe. If you loose your phone, you can simply rescan your QR codes with your new phone. If you do this, be sure to shred (not just delete) the screenshot from your computer after you print it.		# The QR code you scanned is your private key. You could take a screenshot of this QR code, print a copy of it, and keep it locked in a safe. If you loose your phone, you can simply rescan your QR codes with your new phone. If you do this, be sure to shred (not just delete) the screenshot from your computer after you print it.
	# Use the [https://f-droid.org/en/packages/dk.jens.backup/ oandbackup] app.		# Use the [https://f-droid.org/en/packages/dk.jens.backup/ oandbackup] app (requires root).
	# Use the ADB = Android DeBugger CLI tool in linux to create a backup. This doesn't work for all apps, but it's been documented to work for FreeOTP at least.		# Use the ADB = Android DeBugger CLI tool in linux to create a backup. This doesn't work for all apps, but it's been documented to work for FreeOTP at least.
	adb backup -all -apk -f backup.ab # backup all apps		adb backup -all -apk -f backup.ab # backup all apps

2018-10-19T18:33:29Z

What if I lose the device holding my TOTP private keys?

← Older revision		Revision as of 18:33, 19 October 2018
Line 73:		Line 73:

	# The QR code you scanned is your private key. You could take a screenshot of this QR code, print a copy of it, and keep it locked in a safe. If you loose your phone, you can simply rescan your QR codes with your new phone. If you do this, be sure to shred (not just delete) the screenshot from your computer after you print it.		# The QR code you scanned is your private key. You could take a screenshot of this QR code, print a copy of it, and keep it locked in a safe. If you loose your phone, you can simply rescan your QR codes with your new phone. If you do this, be sure to shred (not just delete) the screenshot from your computer after you print it.
	# Use the ~~"Titanium Backup"~~ app~~. This free, but not FLOSS~~.		# Use the [https://f-droid.org/en/packages/dk.jens.backup/ oandbackup] app.
	# Use the ADB = Android DeBugger CLI tool in linux to create a backup. This doesn't work for all apps, but it's been documented to work for FreeOTP at least.		# Use the ADB = Android DeBugger CLI tool in linux to create a backup. This doesn't work for all apps, but it's been documented to work for FreeOTP at least.
	adb backup -all -apk -f backup.ab # backup all apps		adb backup -all -apk -f backup.ab # backup all apps