This repository has been archived by the owner on Jul 18, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 17
/
Copy pathreadme.txt
323 lines (231 loc) · 9.82 KB
/
readme.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
=== Duo Two-Factor Authentication ===
Contributors: duosecurity
Tags: authentication, two-factor, authenticator, login, username, password, duo, security
Requires at least: 3.0
Tested up to: 5.6
Stable tag: 2.5.7
Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.
== Description ==
Duo Security provides two-factor authentication as a service to protect against account takeover and data theft. Using the Duo plugin you can easily add Duo two-factor authentication to your WordPress website in just a few minutes!
Rather than relying on a password alone, which can be phished or guessed, Duo's authentication service adds a second layer of security to your WordPress accounts. Duo enables your admins or users to verify their identities using something they have—like their mobile phone or a hardware token—which provides strong authentication and dramatically enhances account security.
Duo is easy to setup and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable two-factor authentication for—admins, editors, authors, contributors, and/or subscribers—without setting up user accounts, directory synchronization, servers, or hardware.
When they log in, your users have multiple ways they can authenticate, including:
* One-tap authentication using Duo’s mobile app (our fastest, easiest way to authenticate)
* One-time passcodes generated by Duo’s mobile app (works even with no cell coverage)
* One-time passcodes delivered to any SMS-enabled phone (works even with no cell coverage)
* Phone callback to any phone (mobile or landline!)
* One-time passcodes generated by an OATH-compliant hardware token (if you’re feeling all old school)
Protect your WordPress website in minutes with Duo.
== Installation ==
Integrating Duo two-factor authentication with WordPress is a breeze.
See [our instructions](https://duo.com/docs/wordpress) at duo.com
== Frequently Asked Questions ==
= How do I get started with Duo? =
Before installing the plugin, you'll need to sign up for a free account at [https://duo.com/](https://duo.com/).
= Is Duo's two-factor service really free? =
Yes, Duo is free up to 10 users and no credit card is required to get started! Paid plans for more than 10 users start at only $1/user/month.
= WordPress integration is great, but what if I want to protect my own web applications with two-factor? =
If you're interested in protecting other web applications with Duo's two-factor authentication, check out [all our online documentation](https://duo.com/docs) to see all of our drop-in integrations and to access our APIs and web SDK.
== Screenshots ==
1. Duo's WordPress plugin adds strong two-factor authentication to any WordPress login. Your users will log in as usual with their primary credentials (their WordPress username and password). Then they’ll be challenged to complete secondary authentication via Duo Push, phone callback, or one-time passcodes generated via the Duo Mobile app or delivered via SMS.
2. The Duo Mobile application allows users to generate passcodes or use Duo Push to perform secondary authentication using their mobile device.
== Changelog ==
= 2.5.7 =
* Wordpress 5.6 support
= 2.5.6 =
* Bug fixes
= 2.5.5 =
* Bug fixes and updated Duo Web SDK to version 2.8
= 2.5.4 =
* Update Duo Web SDK to version 2.6
= 2.5.3 =
* Update Duo-Web-v2.js
= 2.5.2 =
* Wordpress 4.5 support
* Updated iframe style to be consistent with documentation
= 2.5.1 =
* Wordpress 4.4 support
= 2.5 =
* Duo Web V2
* Adaptive iframe
* Duo PHP update
* Bug fixes
= 2.4.1 =
* Wordpress 4.1 support
= 2.4 =
* Fix an IE9 compatibility issue
* Wordpress 4.0 support
* Add a plugin icon
= 2.3.1 =
* Fix an issue that caused errors on some sites
= 2.3 =
* Add support for WordPress 3.9
* Update CA cert bundle
* Send user-agent with API requests
= 2.2 =
* Fix an issue that caused users to see 'Access Denied' when WordPress secret keys are not set correctly
* Fix 'Access Denied' issue due to a plugin caching our old JavaScript file
* Fix an issue that forced users to log in multiple times when going to a non-secure page from an SSL page
* Minor fix for sites using a proxy
= 2.1 =
* Fix an issue that caused 503 errors for some users
* Add support for proxy servers
* Fix an issue where the "Remember Me" checkbox on the login page was being ignored
* Use an application-specific key when signing Duo requests
* Add debug mode which enables verbose logging
* Remove unnecessary assets to reduce package size
= 2.0 =
* Fix an issue that allowed some users to bypass 2FA on multisite networks
= 1.8.1 =
* Fix multi-site login issue
= 1.8 =
* Add support for modal login pages in wordpress 3.8
= 1.7 =
* Fix various single-site and multi-site compatability issues with WordPress instances running 3.0 and 3.2
* Support for WordPress 3.7.1
* Compatability with WP-Engine WordPress hosting service
* Fix some style issues on the settings page
= 1.6.2 =
* Fix a rare conflict with other plugins
= 1.6.1 =
* Add support for Wordpress 3.6.1
* Fix an issue that prevented admins from enabling XMLRPC on multisite instances
* Remove Duo configurations when the plugin is uninstalled from a multisite wordpress instance
* Better support for some custom themes
* Make Duo skey setting a password field
= 1.6 =
* Add support for Duo's new user enrollment frame
= 1.5.3 =
* Improve the way we ping Duo servers
= 1.5.2 =
* Included the root cert we validate agianst for better ssl certificate validation
= 1.5.1 =
* Add better SSL certificate validation when fetching server time
* Modify duo_web to remove the need for NTP
= 1.5 =
* Removed NTP sync requirement
* All duo options will now be removed when plugin is uninstalled
= 1.4.2 =
* Better compatibility with other plugins
* Added setting for enabling/disabling XML-RPC access
= 1.4.1 =
* Improved handling of enabling Duo for specific roles
= 1.4 =
* Improved WordPress Multisite compatibility
= 1.3.4 =
* Compatibility with >3.3
= 1.3.3 =
* Added additional error checking
= 1.3.2 =
* Verified compatibility with WordPress 3.2
= 1.3.1 =
* Fixed a bug with user roles
= 1.3 =
* Default all roles to enable Duo login for upgraded users (same as new installs).
* Require the API hostname setting
* Code cleanups
= 1.2 =
* Select which roles need to authenticate with Duo
= 1.1.1 =
* CSS fixes for IE 6, 7, and 8
= 1.1 =
* Minor tweaks
= 1.0 =
* Initial release!
== Upgrade Notice ==
= 2.5.7 =
* Wordpress 5.6 support
= 2.5.6 =
* Bug fixes
= 2.5.5 =
* Bug fixes and updated Duo Web SDK to version 2.8
= 2.5.4 =
* Update Duo WebSDK to version 2.6
= 2.5.3 =
* Update Duo-Web-v2.js
= 2.5.1 =
* Wordpress 4.4 support
= 2.4.1 =
* Wordpress 4.1 support
= 2.4 =
* Fix an IE9 compatibility issue
* Wordpress 4.0 support
* Add a plugin icon
= 2.3.1 =
* Fix an issue that caused errors on some sites
= 2.3 =
* Add support for WordPress 3.9
* Update CA cert bundle
* Send user-agent with API requests
= 2.2 =
* Please disable the plugin before upgrading, then reactivate after upgrade is done
* Fix an issue that caused users to see 'Access Denied'
* Fix an issue that forced users to log in multiple times when going to a non-secure page from an SSL page
* Minor fix for sites using a proxy
= 2.1 =
* Please disable the plugin before updating. Make sure to enable the plugin when upgrade is done
* Fix an issue that caused 503 errors for some users
* Add support for proxy servers
* Fix an issue where the "Remember Me" checkbox on the login page was being ignored
* Use an application-specific key when signing Duo requests
* Add debug mode which enables verbose logging
* Remove unnecessary assets to reduce package size
= 2.0 =
* Fix an issue that allowed some users to bypass 2FA on multisite networks
* Please disable the plugin before updating
* Notice that when enabling the plugin, you will immediately get prompted for two factor
= 1.8.1 =
* Fix multi-site login issue
= 1.8 =
* Add support for modal login pages in wordpress 3.8
= 1.7 =
* Fix various single-site and multi-site compatability issues with WordPress instances running 3.0 and 3.2
* Support for WordPress 3.7.1
* Compatability with WP-Engine WordPress hosting service
* Fix some style issues on the settings page
= 1.6.2 =
* Fix a rare conflict with other plugins
= 1.6.1 =
* Add support for Wordpress 3.6.1
* Fix an issue that prevented admins from enabling XMLRPC on multisite instances
* Remove Duo configurations when the plugin is uninstalled from a multisite wordpress instance
* Better support for some custom themes
* Make Duo skey setting a password field
= 1.6 =
* Added support for Duo's new enrollment frame.
* If you can't see the new frame style, you can enable it by logging in to your Duo administrative interface, then enable the updated enrollment on the settings page.
= 1.5.3 =
* Improve the way we ping Duo servers
= 1.5.2 =
* Included the root cert we validate agianst for better ssl certificate validation
= 1.5.1 =
* Add better SSL certificate validation when fetching server time
* Modify duo_web to remove the need for NTP
= 1.5 =
* Removed NTP sync requirement
* All duo options will now be removed when plugin is uninstalled
= 1.4.2 =
* Better compatibility with other plugins
* Added setting for enabling/disabling XML-RPC access
= 1.4.1 =
* Improved handling of enabling Duo for specific roles
= 1.4 =
* Improved WordPress Multisite compatibility
= 1.3.4 =
* Compatibility with >3.3
= 1.3.3 =
* Added additional error checking
= 1.3.2 =
* Verified compatibility with WordPress 3.2
= 1.3.1 =
* Fixed a bug with user roles
= 1.3 =
* Default all roles to enable Duo login for upgraded users (same as new installs).
= 1.2 =
* Select which roles need to authenticate with Duo
= 1.1.1 =
* CSS fixes for IE 6, 7, and 8
= 1.1 =
* Minor tweaks
= 1.0 =
* Initial release!