Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
[DBTech] Two-Factor Authentication (vB4) Details »
[DBTech] Two-Factor Authentication (vB4)
Mod Version: 1.0.4, by DragonByte Tech (Coder) DragonByte Tech is offline
Developer Last Online: Dec 2018 I like it Show Printable Version Email this Page

vB Version: 4.x.x Rating: (7 votes - 4.29 average) Installs: 76
Released: 04 Mar 2014 Last Update: 19 Dec 2016 Downloads: 408
Supported DB Changes Uses Plugins Additional Files Translations  

Two-Factor Authentication lets you ensure only trusted networks have access to your account, by using your smartphone to validate login attempts from new IP addresses.


Why use Two-Factor Authentication?

The most common form of "hacking" a forum today is someone guessing or in some other way gaining access to the password to an administrator account. Even with password protection on your AdminCP and ModCP directory, irreparable harm can be done with an administrator account without needing to log in to any of these locations. Enabling two-factor authentication ensures that only trusted networks can access the accounts of your staff as well as your members.

Our two-factor authentication mod uses Google Authenticator to pair a member's forum account with their smartphone app. A "Recovery Key" shown on-screen during setup ensures that if a member should ever lose their phone, they can regain access to their account.


-------------------------------------------------------------------------------------------

Other addons available @ www.DragonByte-Tech.com/forum
Support posted at our forum is generally answered much quicker.

-------------------------------------------------------------------------------------------

If you like this mod please hit the button to the right ---->

Please remember to click the, button to the right if you installed the mod ---->

What does 'Marking As Installed' do ?

* It helps you to stay on top of updates - members who have installed modifications will be notified by us whenever new updates are available.

*
For security issues - vbulletin.org will contact all members who have installed a modification whenever a security issue is brought to their attention.

* Marking a modification as installed also helps us know how many people are using our work, giving us extra incentive to provide more features and new modifications.

We appreciate the support!

-------------------------------------------------------------------------------------------

Feature List

UserCP Integration
  • Adds a "Two-Factor Authentication" link in the UserCP under "My Account"
  • Displays a page with a button to activate or deactivate the authenticator

Network Verification
  • Logs the IP Address of members who have activated the authenticator
  • Asks for verification code for untrusted networks
  • Blocks forum, AdminCP and ModCP access attempts from untrusted networks

Google Authenticator
  • Uses Google's authenticator to handle the QR barcode and code generation
  • Works on Android and iOS
  • Recovery Key ensures that if you lose your phone, you can deactivate the authenticator

IP Whitelist
  • Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
  • Whitelists IPs for all accounts for as long as the IP is in config.php
  • Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management

General / Other
  • Display version number
  • Enter your Affiliate ID


-------------------------------------------------------------------------------------------

This mod displays a copyright notification in the footer of all pages which includes:
  • 1 Link to DragonByte Technologies homepage
  • 1 Link to Product Description page of this modification

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	305.jpg
Views:	896
Size:	39.9 KB
ID:	148338   Click image for larger version

Name:	306.jpg
Views:	1110
Size:	38.7 KB
ID:	148339  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
X-Factor Sean James vBulletin 3.8 Styles 6 14 Aug 2012 03:03
X-Factor Sean James vBulletin 3.6 Styles 20 11 Mar 2009 13:03
X-Factor Sean James vBulletin 3.5 Styles 40 17 Apr 2007 12:52

  #61  
Old 05 Mar 2018, 18:40
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Real name: Fillip & Iain
I am not able to replicate any issues with it, it works perfectly fine @ our site.


Fillip
__________________
www.Dragonbyte-tech.com
Please support our mods by nominating them to MOTM!
Please do NOT PM us for support. Private Messages are only for exchanging sensitive details (like FTP / AdminCP logins).
Reply With Quote
  #62  
Old 05 Apr 2018, 14:24
Zelda-King's Avatar
Zelda-King Zelda-King is offline
 
Join Date: Nov 2002
I've installed it fine on 4.2.5. The only suggestion is a way for it to work per trusted device as those not on a static IP will have to re-authenticate every session.
__________________
Sig
Reply With Quote
  #63  
Old 02 Aug 2018, 21:59
Piloux Piloux is offline
 
Join Date: Oct 2017
One of my users installed it but lost his phone and doesn't have the recovery key.

As the website administrator, is there a way I can remove it from his account?
Reply With Quote
  #64  
Old 19 Aug 2018, 15:29
Piloux Piloux is offline
 
Join Date: Oct 2017
One of my users installed it but lost his phone and doesn't have the recovery key.

As the website administrator, is there a way I can remove it from his account?
Reply With Quote
  #65  
Old 20 Aug 2018, 09:38
z3r0's Avatar
z3r0 z3r0 is online now
 
Join Date: Apr 2005
Location: Lancashire, UK
Originally Posted by Piloux View Post
One of my users installed it but lost his phone and doesn't have the recovery key.

As the website administrator, is there a way I can remove it from his account?
This happened with one of my users a few days ago, I had to remove the values in the dbtech_twofactor_secret & dbtech_twofactor_recovery fields for that user in the user database table to get him back in.

If you post over at dragonbyte's support forum they may have a better way.
__________________
Better VB.org search
Reply With Quote
  #66  
Old 23 Aug 2018, 11:01
Piloux Piloux is offline
 
Join Date: Oct 2017
Originally Posted by z3r0 View Post
This happened with one of my users a few days ago, I had to remove the values in the dbtech_twofactor_secret & dbtech_twofactor_recovery fields for that user in the user database table to get him back in.

If you post over at dragonbyte's support forum they may have a better way.
Alright thanks, so it's in the table users ?
Reply With Quote
  #67  
Old 23 Aug 2018, 13:00
z3r0's Avatar
z3r0 z3r0 is online now
 
Join Date: Apr 2005
Location: Lancashire, UK
Yes, I cleared the values in the "dbtech_twofactor_secret" & "dbtech_twofactor_recovery" fields in the "user" table for that member.
__________________
Better VB.org search
Reply With Quote
  #68  
Old 24 Aug 2018, 16:19
fortforum fortforum is offline
 
Join Date: Feb 2007
Such a feature would be extremely nice to have access to from admincp.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 09:44.

Layout Options | Width: Wide Color: