Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
[DBTech] Two-Factor Authentication (vB4) Details »
[DBTech] Two-Factor Authentication (vB4)
Mod Version: 1.0.4, by DragonByte Tech (Coder) DragonByte Tech is offline
Developer Last Online: Sep 2019 I like it Show Printable Version Email this Page

vB Version: 4.x.x Rating: (8 votes - 3.88 average) Installs: 77
Released: 04 Mar 2014 Last Update: 19 Dec 2016 Downloads: 422
Supported DB Changes Uses Plugins Additional Files Translations  

Two-Factor Authentication lets you ensure only trusted networks have access to your account, by using your smartphone to validate login attempts from new IP addresses.


Why use Two-Factor Authentication?

The most common form of "hacking" a forum today is someone guessing or in some other way gaining access to the password to an administrator account. Even with password protection on your AdminCP and ModCP directory, irreparable harm can be done with an administrator account without needing to log in to any of these locations. Enabling two-factor authentication ensures that only trusted networks can access the accounts of your staff as well as your members.

Our two-factor authentication mod uses Google Authenticator to pair a member's forum account with their smartphone app. A "Recovery Key" shown on-screen during setup ensures that if a member should ever lose their phone, they can regain access to their account.


-------------------------------------------------------------------------------------------

Other addons available @ www.DragonByte-Tech.com/forum
Support posted at our forum is generally answered much quicker.

-------------------------------------------------------------------------------------------

If you like this mod please hit the button to the right ---->

Please remember to click the, button to the right if you installed the mod ---->

What does 'Marking As Installed' do ?

* It helps you to stay on top of updates - members who have installed modifications will be notified by us whenever new updates are available.

*
For security issues - vbulletin.org will contact all members who have installed a modification whenever a security issue is brought to their attention.

* Marking a modification as installed also helps us know how many people are using our work, giving us extra incentive to provide more features and new modifications.

We appreciate the support!

-------------------------------------------------------------------------------------------

Feature List

UserCP Integration
  • Adds a "Two-Factor Authentication" link in the UserCP under "My Account"
  • Displays a page with a button to activate or deactivate the authenticator

Network Verification
  • Logs the IP Address of members who have activated the authenticator
  • Asks for verification code for untrusted networks
  • Blocks forum, AdminCP and ModCP access attempts from untrusted networks

Google Authenticator
  • Uses Google's authenticator to handle the QR barcode and code generation
  • Works on Android and iOS
  • Recovery Key ensures that if you lose your phone, you can deactivate the authenticator

IP Whitelist
  • Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
  • Whitelists IPs for all accounts for as long as the IP is in config.php
  • Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management

General / Other
  • Display version number
  • Enter your Affiliate ID


-------------------------------------------------------------------------------------------

This mod displays a copyright notification in the footer of all pages which includes:
  • 1 Link to DragonByte Technologies homepage
  • 1 Link to Product Description page of this modification

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	305.jpg
Views:	933
Size:	39.9 KB
ID:	148338   Click image for larger version

Name:	306.jpg
Views:	1153
Size:	38.7 KB
ID:	148339  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
X-Factor Sean James vBulletin 3.8 Styles 6 14 Aug 2012 03:03
X-Factor Sean James vBulletin 3.6 Styles 20 11 Mar 2009 13:03
X-Factor Sean James vBulletin 3.5 Styles 40 17 Apr 2007 12:52

  #31  
Old 27 Jul 2014, 22:11
iraqiboy90 iraqiboy90 is offline
 
Join Date: Sep 2012
what does the pl2 do differently than the pl1?
Reply With Quote
  #32  
Old 27 Jul 2014, 22:21
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Updates the bugfix from PL1, which was incomplete.


Fillip
__________________
www.Dragonbyte-tech.com
Please support our mods by nominating them to MOTM!
Please do NOT PM us for support. Private Messages are only for exchanging sensitive details (like FTP / AdminCP logins).
Reply With Quote
  #33  
Old 12 Aug 2014, 02:38
Esaam Esaam is offline
 
Join Date: Aug 2006
Hi,
I have an issue. The google authenticator tells me that the QRCode is not a valid google authenticator QRcode. Anyone has the same problem? I might have overlooked something. Sorry if that's the case.
Reply With Quote
  #34  
Old 12 Aug 2014, 04:21
iraqiboy90 iraqiboy90 is offline
 
Join Date: Sep 2012
Request if possible:

an option to select from whether the plugin asks for the code when:
- IP changes
or
- Always (like in wordpress with a plugin)

Btw, any news about the Device ID / Cookie (with 24h ttl?) based authorization, so users with dynamic IPs that frequently changes (or every page request) can browse without getting interrupted by this plugin?

Last edited by iraqiboy90; 12 Aug 2014 at 04:26.
Reply With Quote
  #35  
Old 27 Aug 2014, 04:12
MoDz MoDz is offline
 
Join Date: Jul 2011
Can you add Yubikey Authentification?
Reply With Quote
  #36  
Old 31 Aug 2014, 10:57
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Feature Requests are best posted @ our site, as we cannot log feature requests found on this site.


Fillip
__________________
www.Dragonbyte-tech.com
Please support our mods by nominating them to MOTM!
Please do NOT PM us for support. Private Messages are only for exchanging sensitive details (like FTP / AdminCP logins).
Reply With Quote
  #37  
Old 19 Jan 2015, 10:20
phriek phriek is offline
 
Join Date: Mar 2010
How can i add this nice addon to the standard-mobile-style? I get a "not supported"-error in the mobile view and have to switch to "Desktop Version" to enter my Authentication-Code

Last edited by phriek; 19 Jan 2015 at 11:42.
Reply With Quote
  #38  
Old 19 Jan 2015, 10:41
Buzzle Buzzle is offline
 
Join Date: Apr 2012
Why does it say Invalid Authentication?
Reply With Quote
  #39  
Old 19 Jan 2015, 19:01
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Originally Posted by phriek View Post
How can i add this nice addon to the standard-mobile-style? I get a "not supported"-error in the mobile view and have to switch to "Desktop Version" to enter my Authentication-Code
We don't support the mobile style at this time, sorry

Originally Posted by Buzzle View Post
Why does it say Invalid Authentication?
Make sure you are using the right authenticator app.


Fillip
__________________
www.Dragonbyte-tech.com
Please support our mods by nominating them to MOTM!
Please do NOT PM us for support. Private Messages are only for exchanging sensitive details (like FTP / AdminCP logins).
Reply With Quote
  #40  
Old 25 Jan 2015, 07:07
Master Of Unive's Avatar
Master Of Unive Master Of Unive is offline
 
Join Date: Oct 2009
Great mod, but is there a way for Admin to email a user the recovery key incase the user has lost it?
Reply With Quote
  #41  
Old 03 Feb 2015, 20:14
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
You could look in the database, in the user table. The dbtech_twofactor_recovery column holds the recovery key.


Fillip
__________________
www.Dragonbyte-tech.com
Please support our mods by nominating them to MOTM!
Please do NOT PM us for support. Private Messages are only for exchanging sensitive details (like FTP / AdminCP logins).
Reply With Quote
  #42  
Old 16 Jun 2015, 00:29
highlander29 highlander29 is offline
 
Join Date: Mar 2011
Originally Posted by Skyrider View Post
Is there anyway to see through the AdminCP to see if the user is using the Two-Factor Authentication? Great mod btw.
I'd like to ask this question again.

This is a nice mod but it would be really helpful to know who has that turned on.
Reply With Quote
  #43  
Old 16 Jun 2015, 00:39
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Not at this time, sorry


Fillip
__________________
www.Dragonbyte-tech.com
Please support our mods by nominating them to MOTM!
Please do NOT PM us for support. Private Messages are only for exchanging sensitive details (like FTP / AdminCP logins).
Reply With Quote
  #44  
Old 27 Oct 2015, 21:48
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
Will this work for vb3?
Reply With Quote
  #45  
Old 30 Oct 2015, 00:23
Alan_SP's Avatar
Alan_SP Alan_SP is offline
 
Join Date: Nov 2009
Actually, it's already been asked and answered. Link to post were is that asked, next post is answer.

And no, it won't.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 07:36.

Layout Options | Width: Wide Color: